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", 0x1000, 0x6}, {&(0x7f0000000300)="17d54a1a6f001fb223b509092615df263a30444ab737769d00fbc87e76bcba80aea3a83e37c7cc1d230ae9f9188aff25af977575d1a2019b34bda211e315d5a09ca1ba9183334dfd4c52cb4f4da484c483ead1f14710dbf24b23", 0x5a, 0x10001}], 0x100000, &(0x7f0000000400)='+\x00') sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 18:05:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf003000000000000, 0x0, 0x0, 0x0) 18:05:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}) 18:05:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0) 18:05:22 executing program 4: socket$kcm(0x2b, 0x5, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setxattr$security_evm(0x0, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "f722591998a286b0471d8887f8323e7a8172d986"}, 0x15, 0x4eefbe25cecc7b78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) connect$ax25(r0, 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) setregid(0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) unshare(0x40000000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 18:05:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 771.769034] IPVS: ftp: loaded support on port[0] = 21 18:05:23 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xffffffc0) r3 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, r3}) ioctl$TCFLSH(r2, 0x541b, 0x0) 18:05:23 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10001, 0x0, 0x10d000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xf6ffffff00000000, 0x0, 0x0, 0x0) 18:05:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:05:23 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x80000) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1ac, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8ca}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdcc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x69}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x53a1bb36}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd7}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaef8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40080}, 0x80) getsockopt$inet_tcp_int(r1, 0x6, 0x1a, 0x0, &(0x7f0000001ac0)) 18:05:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfcfdffff00000000, 0x0, 0x0, 0x0) 18:05:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:05:23 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0xaa) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x285) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 18:05:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0) 18:05:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) [ 773.397571] protocol 88fb is buggy, dev hsr_slave_0 [ 773.402714] protocol 88fb is buggy, dev hsr_slave_1 18:05:26 executing program 4: socket$kcm(0x2b, 0x5, 0x0) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setxattr$security_evm(0x0, &(0x7f0000000280)='security.evm\x00', &(0x7f00000002c0)=@sha1={0x1, "f722591998a286b0471d8887f8323e7a8172d986"}, 0x15, 0x4eefbe25cecc7b78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) connect$ax25(r0, 0x0, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) setregid(0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000380)) r1 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r1) unshare(0x40000000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 18:05:26 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000380)=""/250) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80200, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:05:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 18:05:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xff0f000000000000, 0x0, 0x0, 0x0) 18:05:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x109) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x38, "f205103f2253657a1ae99ccaf1f7111f355fc59b70f19347ba7beaa10d7a8929e305be80e78132765b11d4380cd2832f42068506565644c8"}, &(0x7f0000000100)=0x40) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0xe6d5}, 0x8) 18:05:26 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) recvfrom$rose(r0, &(0x7f0000000040)=""/138, 0x8a, 0x40, &(0x7f0000000140)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x1, @default}, 0x1c) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000100), 0x4) 18:05:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffff1f0000000000, 0x0, 0x0, 0x0) 18:05:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 18:05:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c4dc00025e0b01047be070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x50001, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xffffffffffffd37e}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xd526}, 0x8) write$FUSE_ATTR(r1, &(0x7f0000000140)={0x78}, 0x78) [ 775.345883] IPVS: ftp: loaded support on port[0] = 21 18:05:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffff3f00000000, 0x0, 0x0, 0x0) 18:05:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x4000105000) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00') r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5d9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4800000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44010}, 0x4004010) 18:05:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 18:05:29 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) write$selinux_create(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73798100000000000000226fe1a54754a0f64091fd631936e192489ffe2ec8f61696a30ac8982dd77df947da6ebdbd00000000000000b09d8e167de7e5f2414cf9e9fc513dbf817093f4bcda21ed556106898bdbffca302e104b4a8be832b19e4f43172d5e053b1475d2887ff57b54c0ff4b7956ed839943421a9e129648a7e4077c3828c24676b7579cdc61c49da565aeaadb9c2f0134d75789bf68b27ed2"], 0x3) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r1, 0x0) fchdir(r0) ftruncate(r2, 0x7) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000040)="3fde4dabe06ac90cc7d0ef2b630ce58112", 0x11}, {&(0x7f0000000100)="ccecb6d7f0ec4d1f2cdcf6054b0b856c9a129665ae6b58a33164deb2859c1c325c218422051e809c37a5", 0x2a}], 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r4, 0x0, 0x9219) 18:05:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0) 18:05:29 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x185080, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000140)={0x0, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:29 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x2, 0x2) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x41}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x4000105000) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000040)='syz1\x00') r3 = syz_open_dev$mouse(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, r0) keyctl$clear(0x7, r0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd5d9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x69}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4800000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x44010}, 0x4004010) 18:05:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TCFLSH(r1, 0x541b, 0x0) 18:05:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 18:05:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0) 18:05:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 18:05:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'bridge_slave_1\x00'}, 0x18) fcntl$setsig(r1, 0xa, 0x7) 18:05:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffc0000001, 0x0, 0x0, 0x0) [ 778.776987] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 778.786552] IPVS: stopping master sync thread 28601 ... 18:05:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 18:05:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}) 18:05:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400080, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r1}}]}) 18:05:30 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000240)={0xffffffffffff834a, 0x7fffffff, 0x3}) exit(0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000200)=0x1ff) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x1, 0x5, 0x2}}, 0x28) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'stack\x00'}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/126) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r0, r1, 0xc, 0x2}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) preadv(r1, &(0x7f00000013c0), 0x1e3, 0x0) [ 778.820824] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 779.021946] hfsplus: uid requires an argument [ 779.051761] hfsplus: unable to parse mount options 18:05:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2, 0x0) 18:05:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:05:30 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) dup2(r0, r0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xb}) close(r0) 18:05:30 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x800) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r2, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r2, 0x541b, 0x0) 18:05:30 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000640)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000003804000000000000380200001801000050030000500300005003000004000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000003500001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010800000080ffffff3f00000002000000ac1414aae0000002000000ffffffffff000000000000000000000000000000000000000000000000ff00ffff00ff00000000000000000000ffffffffffff00000000000000000000000000000000000000ffff000000000000000000000000000005000100240000000900007465716c3000000000000000000000007663616e30000000000000000000000000000000000000000000ff000000000077000000000000000000000000000000000000000000000000ff0000000000000000180300000000000000000000f00018010000000000000000000000000000000000000000000000000000280041554449540000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df00e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/1071], 0x488) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000c00)={0xfffffffffffffffd, 0x2, 0xf000, 0x2000, &(0x7f0000013000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = creat(&(0x7f0000000ac0)='./file0\x00', 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000ec0)=[@mss={0x2, 0x9}, @window={0x3, 0x4}, @window={0x3, 0x1, 0x8f}, @sack_perm], 0x4) r6 = creat(&(0x7f0000000bc0)='./file0\x00', 0x44) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000e40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x128, r7, 0x520, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'hwsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x3}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x800, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000b00)={'NETMAP\x00'}, &(0x7f0000000b40)=0x1e) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x100000000, 0xffffffff, 0x1, 0xff, 0x10001, 0xc99, 0x0, 0x102, 0xff, 0x0, 0x0, 0x0, 0xda92], 0x102000}) openat$cgroup_ro(r6, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-control\x00', 0x24000, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000580)={0x7, 0x6, [{0x4, 0x0, 0x101}, {0x6, 0x0, 0xffffffff}, {0x2, 0x0, 0x2}, {0x5, 0x0, 0xffffffff}, {0x4, 0x0, 0x4}, {0x80, 0x0, 0x6}, {0x25747326, 0x0, 0x80000000}]}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000380)) openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x42600, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000e80)=0x80000001, 0x4) getpid() ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/170}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="66b8a5008ed8640f01d10f01f33e2e363e0fd20a0f0766b8ea000f00d0c7442400ad72b7f0c744240200a00000c7442406000000000f011c24c4c20d2f0e6526660f38399d0f00000066baf80cb8c850f582ef66bafc0ced", 0x58}], 0x5a7, 0x20, &(0x7f00000001c0)=[@cr4={0x1, 0x100}, @cr4={0x1, 0x10}], 0x2) 18:05:30 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/bnep\x00') ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[0x0]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000b6c424a96c12c0b51210b1932f0000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x3f, 0x6, 0x0, {0x0, 0x4000000, 0x16, 0x0, 'mime_type'}}, 0x12d) 18:05:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 18:05:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) [ 779.660300] XFS (loop0): Invalid superblock magic number 18:05:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1, 0x71, r3}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$KDDELIO(r2, 0x4b35, 0x200) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x40}, {0x80010006}]}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x323b33eace24c268) accept4$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x0) 18:05:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:05:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3, 0x0) 18:05:31 executing program 5: prctl$PR_GET_UNALIGN(0x5, &(0x7f00000003c0)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000100)="66660f38827d75660f2f6e0f660f01df0f20e035000100000f22e0b8006000000f23c00f21f835020005000f23f8c4c2152d4420000f79e8b99d0b00000f320f01c88fc878c3a7d16a9bec26", 0x4c}], 0x1, 0x30, &(0x7f00000001c0)=[@dstype3={0x7, 0x5}, @cstype3={0x5, 0x7}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) finit_module(r2, &(0x7f0000000380)='cgroup.subtree_control\x00', 0x3) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000400)=0x6, &(0x7f0000000440)=0x2) 18:05:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:05:31 executing program 4: r0 = socket(0xa, 0x3, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty={[0x2]}}}}, 0x108) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "cef89925e88bbd87", "93fcac2708a90412e04e970b42db5f35", "c23cde93", "3cb51872a07e8552"}, 0x28) [ 780.101997] XFS (loop0): Invalid superblock magic number 18:05:31 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_trie\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:05:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) 18:05:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) 18:05:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 18:05:31 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x1, {{0xa, 0x4e23, 0x8000, @rand_addr="3711ab55bd898e5ee67e2dec64bef08c", 0x8000}}}, 0x88) unshare(0x4000008020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) prctl$PR_SET_SECUREBITS(0x1c, 0x13) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in6=@empty}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x760000, 0xffffffff7ff0bdbe}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550d, &(0x7f0000000100)) 18:05:31 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000100)={0x6, 0x10001, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:05:32 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='..\x00\x00\x00\x00\x00') setns(r0, 0x10000000) inotify_init1(0x800) [ 780.648509] XFS (loop0): Invalid superblock magic number 18:05:32 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x200, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r1, &(0x7f0000000140)={0x4}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000180)={0xc0ff, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5, 0x0) 18:05:32 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0x80085617, 0x0) 18:05:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:05:32 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18002091a9714029966d00000000000000000000000000006301000000000000"], &(0x7f0000000000)='Q\xa2\xa2\x11\xbbo-\x95\xd3\xc0I\x960(U\x06\t.\xc3\t\xa4\xd5\x99\x02_2\x01\r\xf8\xedxR\xc2\a\xc0\x17\x15k3\xfc\xe7\x9d\xea\xe7\x19M#\"N\xe4\xe4\xc5\xe3!\xfd\x80\xb7', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) syz_emit_ethernet(0xe8, &(0x7f0000000040)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [{[], {0x8100, 0x9, 0x80000001, 0x3}}], {@ipx={0x8137, {0xffff, 0xd6, 0x5, 0x15, {@current, @random="6659b7cc1be2", 0x1}, {@random=0x9d2, @current, 0x80000001}, "d5f4e25e297feb90c43029bc028314cb3e309a75d3bec5f33042107f76bfee256fb609b3297a815d40c834f202f36a4d27bea56553a1e02be8c888112ad0e2fb2e827dbaa3c197c9c9b2ca458f185481f01eba918884aa1fed08c450181174cdc71ef4eebef9e50c917a196a65e37df7280f225a79bb81fbddebe2629ffd19b554a61d87908481854be2e225ad5b362aef60ab7691f7cb5f3eca647a9f43af6ab9ed5bce55af3ff1a5031931d9d1376c3dcecbd01116bf35"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x1d, 0xb29, 0xd2e, 0xf4]}) r1 = dup2(r0, r0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7) [ 781.045149] XFS (loop0): Invalid superblock magic number 18:05:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) 18:05:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$sock(r1, &(0x7f0000000440)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x600000000000000, @loopback, 0x5}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="900f0ad0b00c3bec9970190b0b4a882f834dbc6f31c6736edf7b6d3be1e312faa5f3d8616edbb34bb0337d5e1b6de74f20cc90c5a8c6ca61f20a2304345401038525831b517aa1470cfb5223df4a0638d51ac834b4e8325d600b5320200e08524ea8305de24542a997a7ffa68d94fb934dda9576fee642134d46f04b6877fc7967491d9361cf64a6e2ec65991ab2532bd826cb34b8e9516401f0d9284670493177185ff54a1a58d7866ef4d8e713bde5ea8bee3104d90bb989424857937ab01cf9cdf0635d16", 0xc6}, {&(0x7f0000000180)="ee89d1b43375d6b950447bac3bca2fb2c9968984b37d68b3ab5a94cac19da9b1619ea6344ed83c3f9e2196745436680d4882", 0x32}, {&(0x7f00000001c0)="a206663c82dd157bcb216604478031e5dde9e67a9f51532f43183cf4f9fea60c9523a7c3efeb94ce51beb80655215b7bfe480328e1b9231645333bafe6bca6576749a88e26a7a12216d90680285867e7b49a28f8b9cafee3d13034e08f3ca6f2f7420752b37c5e4544864eedfb5c8f1b53750ff20afa18", 0x77}, {&(0x7f0000000280)="2d33ff36a1f4468307a50634dec169893007d662c4483b2888c458c6bd858f5591bb39ab50ded7fd98eae78047c89be4949f85e1a96c6bb14d17ef916b30f075bf7ad5d4027e433ea7f9aae29a584ea6ef9a91ea7fda70b3ba10c884c24f1792946c41d337cee43be707d3428207d1ca0bc1e67ec5b3c0b738577a2037213da99c", 0x81}, {&(0x7f0000000340)="1803ea4ce3ca65361dad9655449481c12079271e2dce9ec8f134fe2549ae7a588ccde04c73ccb0a01cbb", 0x2a}], 0x5, &(0x7f0000000400)=[@txtime={{0x18, 0x1, 0x3d, 0xd42e}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x801) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x9a9d19c91ee06a27, 0x0) write$P9_RCLUNK(r2, &(0x7f00000004c0)={0x7, 0x79, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000240)) 18:05:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 18:05:32 executing program 4: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000140)={0x0, {0xfe1a, 0xa2, 0x2}}) write$selinux_create(r0, &(0x7f00000000c0)=@access={'system_u:object_r:clock_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x4}, 0x50) r1 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='/usr/sbin/cups-browsed', 0xfffffffffffffffa) keyctl$set_timeout(0xf, r1, 0x9) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000180)) 18:05:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6, 0x0) 18:05:32 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x3, r1, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x0, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) getsockopt$netlink(r5, 0x10e, 0x6, &(0x7f0000000380)=""/251, &(0x7f0000000140)=0xfb) 18:05:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) [ 781.516164] REISERFS warning (device loop4): sh-2021 reiserfs_fill_super: can not find reiserfs on loop4 18:05:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2808000028dc3fa115f869e8539ad5cc1844b4ab911ba38943674f976baefaa8235b9453", @ANYRES16=r2, @ANYBLOB="010000000000000000000300000014000100100001007564700a73797a3000000000"], 0x28}}, 0x0) [ 781.565084] XFS (loop0): Invalid superblock magic number 18:05:33 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x200, 0x400000842) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) poll(&(0x7f00000009c0)=[{r0}, {}], 0x2, 0x7) unlink(&(0x7f0000000000)='./file0\x00') 18:05:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 18:05:33 executing program 3: r0 = memfd_create(&(0x7f0000000180)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91gu\x88_[)i\xe1MK_S#%\xd8\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf^\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb \xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8f\x8e:2L\x06J\xf8\xde\xd0nRA\x8d\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x2) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0080007b18ce305acdb97f2e35dd989243cae3286377614470abf7084c92a71c52c93e7faf56b393906b2a57a66f89c0978d963dca62572f0f2bcfa82c3d78ef90f5bb6afa22000000000000000000000000774c2e651ba968881dbf206368fd1191183d6fa9c9dd6c9cede0e5fa627c54d8fcd7a4295427f6f97ff90512398bfabc62b23c8c2cd36bd3bbe5ea2cef0ee438d0984cc43a90f8c41791a3463dd6e8d5d8d1fb690f286720988cec143cd19632fcde06af3114d37f2f8c02a49a9cb8485cdbe6eaedf07eefce69ccce2e732c32548e141b6c1fc921c49dee74f843c9516a931f732bf4752f45a1553bedf81da4d8c153"], 0x49) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040), 0x10) 18:05:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7, 0x0) [ 781.963852] XFS (loop0): Invalid superblock magic number 18:05:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) pipe(&(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TCFLSH(r1, 0x541b, 0x3) 18:05:33 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)=0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xff, 0x600c0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 18:05:33 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80, 0x23bcf2ee370b84fe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101181, 0x0) accept$nfc_llcp(r0, 0x0, &(0x7f00000000c0)) r1 = socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000300)=@id, 0x10) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x6, 0x240) 18:05:33 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xffffffff, @dev, 0x6}, 0x1c) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @remote}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='bond_slave_0\x00', 0x10000, 0x0, 0x9b}) 18:05:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8, 0x0) 18:05:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 18:05:34 executing program 3: setrlimit(0x7, &(0x7f0000000180)={0x3}) mq_open(&(0x7f0000000240)='!selinuxselinux\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fe0000, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x32, 0x2, 0x1, "b3a3f44bf599439d55a7b7fe713e8ba270faca63adb1f6afd7fcb48129830685ed4d6a75ccbdb7367df43ac8883a58c2a9ff"}) [ 782.694751] XFS (loop0): Invalid superblock magic number 18:05:34 executing program 4: unshare(0x8000400) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x401) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r2, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000380)="1f3723d15d77fb845435b9572333e09bb51037a816ddbc503d17d34f39d8caa6c6badbe1c2acd42332d1ab936be10210a027f1465bd37138383b4e3b2e3468aa7a19777e973dcffffac2607fb5916b130cebe132b379577121172cac369b1f88d9418dc144d51fae61f18a833086a5970fe2d82e34bdcdc49ec6b886c5d16f4eafa8150de34b73d180717a59e234df0af02bba1a87cd414bcfd03939b3e9eebb48cec45674624cf86eee932c1043d2c1920bcd2eef6f1d8edad3ee02e418948031ce3a82c2d4b890") r3 = semget(0x2, 0x4, 0x5c0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000100)=[0x3, 0x81]) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000001c0)={0xc6d2, 0x0, 0x1ff, 0x1, "acaca8a9047dad0a244439026e08df097009509c622284f4429a7b67fb75d1d0"}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'veth1_to_team\x00', {0x2, 0x4e23}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8000, @local, 0x10001}, 0x1c) prctl$PR_SET_THP_DISABLE(0x29, 0x0) open_by_handle_at(r1, &(0x7f0000000280)={0xdf, 0x2000000000000000, "67a519cee4c7af612b36eed27792c12856778b01f59310450bfa742f6cf009e5eea79b838fea4f84003d1d0775f0cde462a17453002f2db6fba31c69003b1d1362d656f6f838251540a3adf20b363b383479fc69b5ddd598b97251cd6879933315a915f80380adfe0c0db2cb13af8b56aabb8740d6b4b0f42e76e59dde037699e9b9ad7bb615c80506cabd054ffb89ac315719fd3dd4f3ec924c229906856351d2adf55476fb9c3bd4068e0bcafa61795e3f966d16eac8d499ef983529be5c2b2463b6cfb2258a4fe62412f571bf627400e9894870fdfc"}, 0x20000) read$eventfd(r1, &(0x7f0000000200), 0x8) 18:05:34 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 18:05:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9, 0x0) [ 783.058774] XFS (loop0): Invalid superblock magic number [ 783.178172] XFS (loop0): Invalid superblock magic number 18:05:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000480)=0x400000000000c) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 18:05:34 executing program 3: r0 = gettid() ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000280)="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") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x140, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) r2 = syz_open_procfs(r0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x10000, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000440)=""/204, 0x1137000, 0x1800, 0x3fd}, 0x18) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380)={0x9, 0x2, 0x401, 0x400, 0xfffffffffffffffc, 0x7f, 0x5125, 0x2, 0x5963, 0x2, 0x7}, 0xb) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r2, 0x0, 0x4000800) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'hsr0\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02'}) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000437770c541f467bd70e3fadbdf2507080000", @ANYRES32=r4, @ANYBLOB="0600080008000700fd6e0000080003eb14000100fe8000000000000000000000000000aa00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'hsr0\x00t\x00\x00L\x00\x00\x00\x00\x00\x00l', 0x1001}) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000540)=0x1, &(0x7f0000000580)=0x4) 18:05:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}) 18:05:34 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x12000, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x400) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x2000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x4000001000008912, &(0x7f0000000000)="11dca505e0e4c800"/19) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:05:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa, 0x0) [ 783.620827] XFS (loop0): Invalid superblock magic number 18:05:35 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) arch_prctl$ARCH_SET_GS(0x1001, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ptype\x00') syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x200002) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000000)="4431b9df480e33300a") 18:05:35 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r4, 0x89e0, &(0x7f00000003c0)={0x1, 0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x8, 0x0, [{0x80000007, 0x9, 0xff80000000000, 0x7bed, 0x4}, {0xc000000f, 0x1, 0x81, 0x4, 0x8}, {0xd, 0x7fffffff, 0x3, 0xff, 0x2}, {0xc000000f, 0x80, 0x7fff, 0xa8f, 0x1}, {0x40000000, 0x3ff, 0x4, 0x1, 0x2}, {0x80000007, 0x2, 0x7, 0x0, 0x8}, {0x0, 0xfffffffffffff62f, 0x881c, 0x1ff, 0x1}, {0xc0000007, 0x0, 0x0, 0x3, 0xfffffffffffffeff}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:35 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7fffffff) fcntl$getown(r0, 0x9) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="000025bd7000ffdbdf25589190857541cbdc7e4a42ece75a144a2583626ef2f10f0000000800"], 0x1c}}, 0x1) creat(&(0x7f0000002880)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f00000001c0)='posix_acl_accessuser\x89#eth1}\x00') 18:05:35 executing program 4: clone(0x4ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x7, &(0x7f0000000000)={0x0, 0x7, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clone(0xa01ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r1) wait4(0x0, 0x0, 0x0, 0x0) tkill(r2, 0x2000000031) rt_sigsuspend(&(0x7f00000000c0)={0x20}, 0x8) 18:05:35 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[], 0x800, 0x0, 0xfffffffffffffffc, 0x9, 0x3, r1}) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000003c0)={0x7, @raw_data="fcfb3f8dc0a2958743529a2c0cec71b79cac9f33e9b21237b5bcd2e4c68654469cf80b774f7c55a876461a405f262af5065cc90a5cddb88c8b6427a7811f03babe71c58cb2fb24af30f07b645644b8ac0d8ce123a53a98fe89a2b8bfec8d16232fc4e0873a47ab071d17fdeb5dc6b6d3341838077796b7574739955160c893f5fadb9a66ab8c2f287b572c70df6e76d98dc94f83cd888e6b1fd09fa434be22ad9392a7fab921ca69c0f1f8ea4733781fd0b9611cc9bc0490a2b7c3e20ab7ef720b1c0ffe44fafecc"}) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x400, 0x20400) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000600)=0xb77, 0x4) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000040)=0x44) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000580)=0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000005c0)={r6, 0x4, 0x1, [0x200]}, 0xa) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000140)=0xffffffffffffff7f) ioctl(r5, 0x1000008912, &(0x7f0000000080)="c0dca5055e8bcfec7be070") bind$alg(r3, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0xb1de, 0x8, 0x4, 0x4, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000200)={r7, 0x1c}, 0x8) 18:05:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) [ 784.689172] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 784.695939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:05:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc, 0x0) [ 785.008365] XFS (loop0): Invalid superblock magic number 18:05:36 executing program 2: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x1000000000000200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) r1 = shmget$private(0x0, 0x4000, 0x33728c5b27f17f29, &(0x7f0000ffc000/0x4000)=nil) r2 = getuid() getgroups(0x7, &(0x7f0000000200)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getgroups(0x9, &(0x7f0000000380)=[0x0, 0xee01, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee00]) r6 = getpgid(0x0) r7 = gettid() shmctl$IPC_SET(r1, 0x1, &(0x7f00000003c0)={{0xd0f6, r2, r3, r4, r5, 0x80, 0x5}, 0xfffffffffffffffe, 0x4, 0x4, 0xcfe, r6, r7, 0x9}) r8 = perf_event_open$cgroup(0x0, r0, 0x4, 0xffffffffffffffff, 0x2) finit_module(0xffffffffffffffff, 0x0, 0x0) unshare(0x10000) prctl$PR_GET_CHILD_SUBREAPER(0x25) mount$9p_unix(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='9p\x00', 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=unix,nodevmap,version=9p2000.u,posixacl,access=client,access=', @ANYRESDEC=r4, @ANYBLOB="2c706f73697861636c2c63616368657461673d74727573746564247d2c776c616e312c666f776e65723d3666ac52ff101aad9e676a64000000000000003fdb84b95f9969537b1625bb406e514492839ec7181ae19f5d3b57ef40697059e57e1cd2619db8fc1ebb3dcb579834df0749c4ee6b3d31eefdcc3253d3a05822d1f540372918ba78155000b2d542d6d58fa641dce50826eeeba394d53778e73a40f63cf7cdacb94cf7ced61521755f44656716f0cad0fb13bc6d0a93a2f0", @ANYRESDEC=r2, @ANYBLOB=',hash,\x00']) r9 = getpgid(r7) syz_mount_image$xfs(&(0x7f0000000500)='xfs\x00', &(0x7f0000000540)='./file0\x00', 0x1, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000580)="87bb8ff170b858cd5cba626477d40da3bd12aa610a53f57650fde1a0b784f19c5cb2e9fbed", 0x25, 0x1b}], 0x40, &(0x7f0000000780)={[{@uqnoenforce='uqnoenforce'}], [{@hash='hash'}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@appraise='appraise'}, {@subj_role={'subj_role'}}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r2}}, {@measure='measure'}, {@fsname={'fsname', 0x3d, '9p\x00'}}]}) sched_rr_get_interval(r9, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) sendmsg(r0, &(0x7f0000002f80)={&(0x7f0000001b80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0xfffffffffffffffc}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001c00)="a707278002fc3b298f90c961133f173503", 0x11}, {&(0x7f0000001c40)="0643cac6bbb7f785520619bcc9bd29ed1d753c04c1aa677b5237ec168909e0de3ee8a48ca40db22b8fbaddf7115d31c4e7d17fd6f3fd34", 0x37}, {&(0x7f0000001c80)="4e48b48da2e2f2366abad709", 0xc}, {&(0x7f0000001cc0)="2c815b2852b7ec48029b451b3c7e5cc3796f8cbd82bfbdb5f0027c873337f1280f13223efdb311161ace7ecad1f795e59331338d74056db4fc603bc12995e097d417f0620266206581ea4f06cba4147ade57f6d7fa1d6b0d9ea1ee1b633e6c6d3535764b119afb55c9a76053cf8a7b92232d452cabda2e71c0d31fe417aa50e192da3587a69082bea1b3d467dff9f96abc72724c5b79a94e19acc3b793c538b9eb4aa827076e1490bad4", 0xaa}], 0x4, &(0x7f0000001dc0)=[{0x1010, 0x11f, 0x0, "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"}, {0x90, 0xff, 0x8, "2c3b624f5e8d691c5a94780de657f46ac75eb524a3b86526c420d794fb6964c6b36a4ecfa4d6027d46add99fb1d6a2789074f641efef0df1687763be415c89352320ec55c99783fd2faf452d7c87c3015c2a974732bd99d277202326aa443478f96871b9eb4d9d275b82a41bfab864df1773225feba436c9039067"}, {0x100, 0x10a, 0x6, "a970509bb0ccbcf558bf94651d81666f1799615fb9d49ddd4117fade1669ce26c6a90f42d3c44bc853d4ec4e8a627acf3d5faae6533d1adbf57d5092d479da33aa2b9393e78586371683965e1d645274d98836af520a4dc545e10c77112f2bab3f54de1987f9190b5e44d093c39582f0f590a784d0f4e56d0cffd7832180fa155e12592d373407b0da0f39a0cddef7a69d34b09cc178e6b60d8f27287b2df1f3f419f3ec8aefa82b5517041a320b6b1922ceec71b914a9948acbb1b70b3bbf33234c43761b1d10568a447a0f08d8624d4cf726a85a223d5c18ae06fbd847b2dd82d67bfc1719442c38c6c3"}], 0x11a0}, 0x20000091) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0xfe, 0x200}, 0x1, 0x7, 0x7, {0x200, 0x7f}, 0x5a5b39ec, 0x1000}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r8}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x3ab3a25b61a98bdb, 0x3, 0x6000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) r12 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001b40)={0xe8, 0x0, &(0x7f0000001980)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000840)={@flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @fda={0x66646185, 0x9, 0x2, 0x1f}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1000}, @increfs_done, @acquire={0x40046305, 0x1}, @free_buffer={0x40086303, r12}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000018c0)={@fd={0x66642a85, 0x0, r11}, @fda={0x66646185, 0x5, 0x2, 0x1f}, @ptr={0x70742a85, 0x0, &(0x7f00000008c0)=""/4096, 0x1000, 0x2, 0x1f}}, &(0x7f0000001940)={0x0, 0x18, 0x38}}}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}, @acquire={0x40046305, 0x1}], 0x92, 0x0, &(0x7f0000001a80)="7554a4b16d55c31dd1141b427237ed813caef9b9efd92ec2c3489b2aba0995fd4ad3ecea5d009a0d08ed0d16f5bbadc3b77b4133d7b1af41b500bd7249f43a71d22e9a7f4f1e73cbe68f729b9f0bb0ea682f39e7ddc6e0058639579562b34b8d86efefc5f1cf588a19ad8d0664aadef53199157f825e88ab77d4bf10d017e4bf1c2637c605112433f5d11f625754d399ea69"}) ptrace$getenv(0x4201, r10, 0x0, &(0x7f0000000080)) 18:05:36 executing program 3: r0 = gettid() ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000280)="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") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x140, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x0) r2 = syz_open_procfs(r0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @default, @rose={'rose', 0x0}, 0x10000, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000440)=""/204, 0x1137000, 0x1800, 0x3fd}, 0x18) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000380)={0x9, 0x2, 0x401, 0x400, 0xfffffffffffffffc, 0x7f, 0x5125, 0x2, 0x5963, 0x2, 0x7}, 0xb) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r2, 0x0, 0x4000800) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'hsr0\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x02'}) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000437770c541f467bd70e3fadbdf2507080000", @ANYRES32=r4, @ANYBLOB="0600080008000700fd6e0000080003eb14000100fe8000000000000000000000000000aa00000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'hsr0\x00t\x00\x00L\x00\x00\x00\x00\x00\x00l', 0x1001}) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000540)=0x1, &(0x7f0000000580)=0x4) 18:05:36 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x542, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000140)=0x3) 18:05:36 executing program 4: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000000000)) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r1 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='ns/mnt\x00', 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="667fc24cd9b91a3bf58942e1cbc016ba8308c18101da970f952b57cf6486132c8912a8ae3eabd87470377ae9b2f1bf43d27acde40852384b48f35a62e27586ec1b562692955f8b18e1e582d45aabbcaf625699b8b7d6d651f95a1f5d0f263d475a584af47940df59d2f3595dd03c9fcb2c2f94ad12daa20801884be54e434555b5d178571c2b1fc9fa3f73124c6d779031bc552de338f26a6ee6a0afdc3a5a2380e2bae746450cc31148d491e90c0b5560f57049ce7136f0331272d019f1c2710cd93610ede3ba60be1554f54e1969f7", 0xd0, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) setns(r0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000480)={{{@in=@remote, @in6=@loopback, 0x4e20, 0x1f, 0x4e20, 0x9, 0x2, 0xa0, 0x20, 0x8, r4, r5}, {0x4c7, 0x1, 0x101, 0x7fffffff, 0x3ff, 0xb466, 0x7, 0xf73c}, {0x7, 0x0, 0x2, 0x1000}, 0x1, 0x6e6bbb, 0x0, 0x0, 0x1}, {{@in6=@rand_addr="0d51afcbf73736247d64c8c64250825e", 0x4d2, 0xff}, 0x0, @in=@empty, 0x0, 0x2, 0x2, 0x7f, 0x0, 0x80, 0x1000}}, 0xe8) 18:05:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:05:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xd, 0x0) [ 785.422677] XFS (loop2): unknown mount option [hash]. [ 785.453053] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 18:05:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 785.471619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 785.493597] 9pnet: p9_fd_create_unix (31576): problem connecting socket: ./file0: -111 18:05:36 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x8000) ioctl$TUNSETPERSIST(r0, 0x8008551d, 0x7fffffffeffb) 18:05:37 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000000000, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x7, @local, 0xe3}, {0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}, 0x8}, 0x8, [0x400, 0x9, 0x6e40, 0x6, 0x7fffffff, 0xffffffff, 0x8, 0x5]}, 0x5c) 18:05:37 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x108013, 0xffffffffffffffff, 0x0) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) 18:05:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:05:37 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) r0 = signalfd(0xffffffffffffff9c, &(0x7f0000000000)={0x1}, 0x8) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x210202, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000340)=0x1d00000000000000, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x80}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000300)={r2, 0x3, 0x2}, 0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x4000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xfffffffffffffffa}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x7}, &(0x7f0000000200)=0x8) getsockopt$inet6_tcp_buf(r3, 0x6, 0x100000000b, 0x0, &(0x7f00000000c0)=0xffffff81) 18:05:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") fcntl$notify(r0, 0x402, 0x80000000) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x0, @remote, 0x4e22, 0x0, 'fo\x00', 0x20, 0x6, 0x2d}, {@multicast2, 0x4e20, 0x2004, 0x0, 0x2, 0x5}}, 0x44) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) [ 785.689248] XFS (loop0): Invalid superblock magic number 18:05:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x200000d}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x4000000000000005) dup3(r2, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000980)="c0dca5055e0be8ec7be070") r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900154003000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) tkill(0x0, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) getgroups(0x8, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0xee01, 0x0, 0xee00]) r6 = getgid() r7 = getgid() setresgid(r5, r6, r7) 18:05:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:05:37 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x32, 0x0, 0x0) [ 785.843227] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 18:05:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe, 0x0) 18:05:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 785.925190] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:37 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r1}) syz_open_pts(r4, 0x2) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:37 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket$inet(0x2, 0x80003, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000240)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r2, 0x50a, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) 18:05:37 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x80040000, 0x0) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x3c2d, 0x6]}, &(0x7f0000000140)=0x8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000840)) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1f}, {0x0, 0x9, 0x0, [], 0x29e4a05d}]}}) 18:05:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 786.074452] XFS (loop0): Invalid superblock magic number 18:05:37 executing program 3: r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40100, 0x0) recvfrom$x25(r1, &(0x7f0000000080)=""/107, 0x6b, 0x40, 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x0) fchmodat(r0, &(0x7f0000000300)='./file1\x00', 0x0) 18:05:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 18:05:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf, 0x0) [ 786.411944] XFS (loop0): Invalid superblock magic number [ 786.683661] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:38 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) getpeername$tipc(r3, &(0x7f00000001c0), &(0x7f0000000380)=0x10) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000140)={0xc, 0x6, 0x3}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f00000003c0)={r2, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x8000010001, 0xffffffffffffffff, 0x10000403, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) accept(r2, 0x0, &(0x7f0000000400)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:05:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8400ae8e, &(0x7f0000000080)) 18:05:38 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)=0x2) pwrite64(r0, &(0x7f0000000080)="a9996d6c74ea6e82cd672d34cc08f06e54cc1fef905c1c0220bd5cad728135fdddbd5975abe61a7985bd77056d4293f39fec1aab82243fd5be4c4e74baf5d6810a9ed6a5fa085d673637a17da53d976e7d99d10e62cbb0ffb425955872f4599b4976a4c8f17668229d2e147b215ec5530e69c25cc60567220da55a9600bfa426cdf4f024fe20aa4f3d3294593c52825bfbf6d81313fef2a5960d0da1d960453f6da8f727ffff38cfe3eab2ab54f8282fb588e26a291a932bf146bc105d6619429c90ea358a5a2e20f195f27278e91a0b4542ac01503aa6395e3cfd", 0xdb, 0x0) 18:05:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:05:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") r1 = socket$inet6(0xa, 0x3, 0x800000000009) mknod$loop(&(0x7f0000000340)='./file0\x00', 0x600, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='+@\x00'], &(0x7f0000000300)=[&(0x7f00000001c0)='em0ppp1\x00', &(0x7f0000000200)='vmnet0keyring@lo\x00', &(0x7f0000000240)='cgroup.\x00', &(0x7f0000000280)='/vboxnet1mime_type,*{securityselinuxcpuset{\x00', &(0x7f00000002c0)='cpusetkeyring\x00']) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2, 0x6, 0x1f, 0xe714}, {0x100000000, 0x4, 0x1e9, 0x20000000000000}]}, 0x10) 18:05:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10, 0x0) 18:05:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 18:05:38 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x20380, 0x0) pipe2(0x0, 0x3fff) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa07040001000008004500002400000008002f9078ac1414bbac1414aa000000000400907805e5704400cd98e8"], 0x0) 18:05:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x1, &(0x7f0000001480)=ANY=[@ANYBLOB="fdddb9fa1704"], 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) bind$x25(r2, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000003b000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000140)={0xfa, r4, 0x2, 0x9}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x8001, 0x7, 0x4, 0x1, {}, {0x5, 0xc, 0x100000000, 0x6, 0x7, 0x4, "f89e4321"}, 0x5, 0x6, @fd, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 786.903443] XFS (loop0): Invalid superblock magic number 18:05:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x22, 0x0) 18:05:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 18:05:38 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 18:05:38 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b2000000000000002404000000000"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x5, &(0x7f0000000ac0)="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") sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="02120000020000000a000097d3d34473"], 0x10}}, 0x0) recvmmsg(r1, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 18:05:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 18:05:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x23, 0x0) 18:05:38 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004180)="5eba98466ab6de1b715f2a6cace1795334af5b89111ffce15086006c24dde0d7e6e498cc42629fa8de51b766fb9c17b613ed3a96f6e6c5de34778c61a6377210801cdb850e6d3477091f94b0b6f7f4b5068a427b0f5f19a201d6e10eb5c5cb370e8bd3d48095a4784d2dd427982024eb926f4ce6c34bd5940a54e95629e3f7affc69c23c778137aeb6a3585522bf31bcc7d0aa0421fffad9d635da63", 0x9c}, {0x0}], 0x2}, 0x40) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffd7f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x18) mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 18:05:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x292, &(0x7f00000052c0)={&(0x7f00000002c0)=@newsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x3}, {@in=@multicast1=0xe0000008, 0x0, 0x2b}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0xfffffffffffffc00, 0x2}}, 0x28) 18:05:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 18:05:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000840)='/dev/dlm_plock\x00', 0x2000, 0x0) bind$vsock_dgram(r1, &(0x7f0000000880)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) read(r0, &(0x7f00000001c0)=""/11, 0x7a) ioctl$TCSETSF(r0, 0x5437, 0x0) 18:05:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2c, 0x0) 18:05:39 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 18:05:39 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0xfffffffffffffe2f, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5, 0x100) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:05:39 executing program 4: clock_adjtime(0x44, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3ff}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaa, &(0x7f0000000080)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000300)={r2, &(0x7f0000000200)=""/228}) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000180)="8b") 18:05:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 18:05:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x48, 0x0) 18:05:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="78f15dbd6399347e1100110297217b92cdab998c1951ef17d885b02d82", 0x1d, 0x3}, {&(0x7f0000000240)="3e78cc", 0x3, 0x100}, {&(0x7f0000000280)="5c3a852ed169a15799a0ff5c050da2c555a60945d05f31a7ab10b835073f192cdf0b4fb8713cd136c5151501643e479ed761ae297f174ae372f265a287ea356e4e05cf53c346f81c85f55a016ffb3c6bf47564da19f08c1ac087dcf8d672e673b94e00d096d910bdff8c38ecfcbbf8787d4c759152f0fba9b6e30fea65d33927855dff2085c29cd1bc7d775bf0177cbcf5b26a8109e990ac9f42f7426cf7fe24154321c236a70c8b9825ce47be87f1a1", 0xb0, 0x8001}], 0x20, &(0x7f0000000480)={[{@creator={'creator', 0x3d, "e89a1197"}}, {@dir_umask={'dir_umask', 0x3d, 0x80000000}}, {@quiet='quiet'}, {@file_umask={'file_umask', 0x3d, 0x2c}}, {@codepage={'codepage', 0x3d, 'cp860'}}, {@type={'type', 0x3d, "43fd1db0"}}], [{@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r0}}, {@context={'context', 0x3d, 'root'}}]}) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000113, 0x0) [ 788.025541] XFS (loop0): Invalid superblock magic number 18:05:39 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@initdev}}, 0xe8) 18:05:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}) 18:05:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote, r3}, 0x14) r4 = dup2(r2, r0) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1}}], 0x1, 0x0, 0x0) 18:05:39 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x2014041, &(0x7f0000000800)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, '!^'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', r6}}, {@euid_eq={'euid', 0x3d, r7}}]}}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r9, 0xae80, 0x0) 18:05:39 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x9, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) poll(&(0x7f0000000080)=[{r0}, {r1, 0x2124}, {r1, 0x1022}, {r0}], 0x4, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0x6) mq_open(&(0x7f0000000000)='\x00', 0x0, 0x20, &(0x7f0000000140)={0x4, 0xfbb9, 0x40, 0x3, 0x8, 0xc540, 0xff, 0x3abc}) r2 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x7fff, 0x101000) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x8) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x40, &(0x7f0000000280)=0x4) 18:05:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4c, 0x0) 18:05:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:05:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dc8e055e0bceec7be070") r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x8000000000002) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001180)={0x3b, @multicast1, 0x4e22, 0x2, 'lc\x00', 0x20, 0x3834, 0x46}, 0x2c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x4000000000001e5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6}}}}}, 0x0) close(r1) write(r3, &(0x7f0000000100), 0x14088) fchmod(r0, 0x40) pipe(&(0x7f00000000c0)) 18:05:39 executing program 2: r0 = getegid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r0, r1) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0202200313000000000000000000000005000600571866720a000068c3b29e359eed6d00200000005500000000000000000000000000000005000900df0000002a00002000000000fe8000000000ff0007000000000000ff00000000000000000200010000ffff000000050d0000000005000500eb0000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) splice(r3, &(0x7f0000000000), r2, &(0x7f0000000080), 0xc09, 0x8) 18:05:39 executing program 3: syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={[{@integrity='integrity'}, {@grpquota='grpquota'}, {@errors_continue='errors=continue'}]}) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x8, 0x1ff}, {0x1, 0x8}, 0x9}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$getenv(0x4201, r1, 0x20, &(0x7f0000000180)) 18:05:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 788.420704] XFS (loop0): Invalid superblock magic number 18:05:39 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000100)={'vxcan1\x00', {0x2, 0x4e22, @loopback}}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:39 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) readahead(r0, 0x7, 0xc00000) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x0) getsockname$netrom(r0, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x8000) getsockname$netrom(r1, &(0x7f0000000040)={{0x3, @netrom}, [@default, @rose, @bcast, @null, @netrom, @null, @null, @netrom]}, &(0x7f0000000100)=0x48) 18:05:39 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5000000000020a42, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/dsp\x00', 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)="64359cf93938330d924f89291c143234abcba8aa8938277db177474551572bf0e077df1cb5f9bdc6f6cc9fa0e69854af568a", &(0x7f00000000c0)="c26a86b61540e670a19a919151b25e0d535c8ebff8837ec2b111ae7d7e86894610c636656a4e3ce3ff1370c1a2d4d022875e7d3291efe0927e8c19d486e3975e223b151909206721f5483717cec7637f354011c1cf5eca90b1c3364c822183751a38a573c89a515976e9cf85d643607c5edbf2c498176c8e4ee537a44a8289", 0x4}, 0x20) ftruncate(r1, 0x2) sendfile(r0, r1, 0x0, 0x40fffffffd) 18:05:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x53, 0x0) 18:05:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 18:05:40 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000900)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000580)={{{@in=@empty, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000680)=0xe8) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000780)={0xb0, 0xfffffffffffffffe, 0x1, [{{0x5, 0x0, 0x10001, 0x0, 0x4, 0x80000000, {0x0, 0x1, 0xffffffffffff8001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x47, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x0, 0x0, 0x5, 0xe0aa, 'vfat\x00'}}]}, 0xb0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x1) flock(r0, 0x5) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) umount2(&(0x7f0000000280)='./file0\x00', 0x0) [ 788.845335] XFS (loop0): Invalid superblock magic number 18:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = accept$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0x6a, 0x4, 0x7, 0xbb2}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000240)=0xf1, &(0x7f0000000280)=0x2) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:05:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 18:05:40 executing program 4: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x800001) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x101000) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x0, 0x1000, 0xff, 0x7}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0xfffffffffffffffd, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000380)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000004c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1, @local, 0x5}, r3}}, 0x30) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000400)={0xa0020, 0x0, [0x2f4, 0xf48, 0x401, 0x7ff, 0x3, 0x8, 0x7, 0x80]}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$getown(r0, 0x9) get_robust_list(r4, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f00000001c0)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) syz_open_dev$cec(&(0x7f0000000480)='/dev/cec#\x00', 0x3, 0x2) 18:05:40 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7ff) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000100)={0x10000, 0x9, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r5 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x200000) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000140)=0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000380)={0x1, 0x7, 0x7f, 'queue1\x00', 0x6}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:05:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 18:05:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 18:05:40 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = accept$alg(r0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000200)={0x6a, 0x4, 0x7, 0xbb2}) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000240)=0xf1, &(0x7f0000000280)=0x2) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 18:05:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2202, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)="194edaa27817196ed687b1095d0056f78bc1244e22f3b76f34593f037282e4faf38fa666e0d1f8523fb086c0ffb55dbb56c27539bf70de4a13fc613016b96180da9eba084b581fec3bafba337f6ab2da354e6507382123f226fe263951d8f0f676ca18b22fd03b6ffb95e2474280591725a220ec38bc0c41544411dddb5c0950451df2093add1ed84917b34e", 0x8c) 18:05:41 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x200}, {0xffffffffffffffff, 0x8}, {r1, 0x480}, {r1, 0x6689}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x9b6}, 0x8) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() request_key(0x0, &(0x7f0000000280)={'syz'}, 0x0, 0xfffffffffffffff9) migrate_pages(0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$capi20_data(r0, &(0x7f00000002c0)={{0x10, 0x99f9, 0x83, 0x83, 0x400, 0x1}, 0xab, "045871733e09faf077e5d9fbe100a58f03e58f97d46567715a39b56c8d1e41589418d4eb30e1950306fe127c1cab348dc6ca25d74f2422b68c66903c846a321fcf9801820d92dc36e829f9eb3927be12a031c94cecb3d64e295ed5cf1988ef03f9ab77f2c0fabb4e757d877204b4586f4659cd7050949504c7e1cfb6db78a644746774044b975ed6a582cf18a0fd21dda6dd5140bfdeb4191c51b7ef6124a92b34d3941153bd8a075c95a0"}, 0xbd) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000007e6c5c2c7f52a94f0200130002000020000000000000000105000600200000000a000000000000ff0f0000000000000000001f00000000000009200000000000020001000000000000000002000098ba05000500000006000a00000000ff7f00ff1700000000000000000000000000170000080000000000"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x393, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000200)=0x1) 18:05:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x68, 0x0) 18:05:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:05:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = creat(0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1300050072070000000007000500"], &(0x7f0000000140)=0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f00000005c0)='./bus\x00', r1}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r2 = socket(0x0, 0xf, 0x2) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x51a6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x200802, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r1}) write$ppp(r3, &(0x7f0000000200)='9', 0x1) 18:05:41 executing program 4: clone(0x902102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000100)="a3dbe1fd34654d20a24b24536f395b7bfa6d063dfcf30f8e6c128dbd4a9c3ddee29e962dfece2d52bd2fa50643790f816d11a14c0563092b906f6e0dace8bdda5867e36411f468e2c192b8c61d5c97041a3db56e823f5f58e3c4e3241f24e3e9d95a80ffec5e3868eb67c0c0d7a2ed561d", 0x71, 0x8}, {&(0x7f0000000180)="5044f4a6c33e6e89f4168f17af092aeaaa15e7ea42bb832aef6f3a176d26816446dfda584528a96398aafdc46412b90bf446432bce5225892c3d9bcdedfd2a3e75d76bc9ad6e83e2171facee69e379bba902", 0x52, 0x1}, {&(0x7f0000000200)="60a53d5cfdffec800a0eb06409d0113cdc12ff472466348fd7de0ad2676ddc25d3272a92807c848730089f7ce320fc", 0x2f, 0x8}], 0x1, &(0x7f00000002c0)='SE Linux') r0 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x1, 0x1) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='_;\x00\x00', @ANYRES16=r1, @ANYBLOB="000429bd7000fcdbdf2502000000080004000000000018000400000000807508000005000000060000000300000008000500020000000800050000000000100004001f000000211d000000010000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x804) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/load\x00', 0x2, 0x0) connect$l2tp(r0, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x4, 0x4}}, 0xffffffffffffffa1) write$selinux_load(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578dc48d2d8c1c0382fa8303912645d9d3c"], 0x11b) 18:05:41 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x4000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x2000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) connect$packet(r2, &(0x7f0000000640)={0x11, 0xf70e2b458b782eb6, r3, 0x1, 0x7, 0x6, @local}, 0x14) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x140, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x100000000, @dev={0xfe, 0x80, [], 0x8}, 0x5}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x4}], 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x3, 0x2, 0x8, 0x80000001, 0x7, 0x6, 0x5, 0x0, 0x1, 0xad, 0x6ef, 0xb4, 0x9, 0xfffffffffffffffa, 0x1]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000440)={r8, 0x9, &(0x7f0000000400)=[@in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0xfffffffffffffd50) ioctl$NBD_SET_SOCK(r7, 0xab00, r7) 18:05:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:05:41 executing program 3: r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x200}, {0xffffffffffffffff, 0x8}, {r1, 0x480}, {r1, 0x6689}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x9b6}, 0x8) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() request_key(0x0, &(0x7f0000000280)={'syz'}, 0x0, 0xfffffffffffffff9) migrate_pages(0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) write$capi20_data(r0, &(0x7f00000002c0)={{0x10, 0x99f9, 0x83, 0x83, 0x400, 0x1}, 0xab, "045871733e09faf077e5d9fbe100a58f03e58f97d46567715a39b56c8d1e41589418d4eb30e1950306fe127c1cab348dc6ca25d74f2422b68c66903c846a321fcf9801820d92dc36e829f9eb3927be12a031c94cecb3d64e295ed5cf1988ef03f9ab77f2c0fabb4e757d877204b4586f4659cd7050949504c7e1cfb6db78a644746774044b975ed6a582cf18a0fd21dda6dd5140bfdeb4191c51b7ef6124a92b34d3941153bd8a075c95a0"}, 0xbd) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609100000007e6c5c2c7f52a94f0200130002000020000000000000000105000600200000000a000000000000ff0f0000000000000000001f00000000000009200000000000020001000000000000000002000098ba05000500000006000a00000000ff7f00ff1700000000000000000000000000170000080000000000"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x393, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000200)=0x1) 18:05:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6c, 0x0) 18:05:41 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = creat(0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1300050072070000000007000500"], &(0x7f0000000140)=0x12) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)={&(0x7f00000005c0)='./bus\x00', r1}, 0x10) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r2 = socket(0x0, 0xf, 0x2) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0x51a6) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x200802, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r1}) write$ppp(r3, &(0x7f0000000200)='9', 0x1) 18:05:41 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200), 0x1000) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0xa, {0x345, 0x3, 0xe1e5, 0x7ff}}) 18:05:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 18:05:41 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x4d, 0x0, 0xffffffffffffff9c}, 0x355) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x40000000003, 0x0, 0x760000, 0x0, 0x10020000008, 0x0}, 0x2c) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) ioctl$RTC_WIE_ON(r0, 0x700f) 18:05:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 18:05:41 executing program 4: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20100, 0x0) fanotify_init(0xffffffffffffffff, 0x3) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="057ff71fac845dfb6d76c42145a3e392", 0x4}, 0x1c) 18:05:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x74, 0x0) 18:05:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, &(0x7f0000000100)=@nl, &(0x7f00000017c0)=0x433, 0x0) bind$pptp(r2, &(0x7f0000001800)={0x18, 0x2, {0x2, @local}}, 0x1e) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, 0x0) r3 = dup(r1) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)={0xa7, 0x7, 0x61f8ddf, "a7447f8df73f9b22a943b67c0f758a75cb28e73b3d0089a46d4a0b853e42a46cee06d33bd00968cd8642946e945ce41152cdfd247f46e179e7159cf1565b8ba2f00d80b781f92d0b4c7daf5acea8c953a4773cc5e35fe1a04591773427d1035b80db7de305cd2c07f9ab13cc8530118da53db723731fad4e5ba09ea23dd2b1a8d74d141da601968ab6cf7251aeffb53e0f9aa3efa2b0f6754ab76318fe147c848cb3c96c3ac5dc"}) fcntl$setstatus(r1, 0x4, 0x2800) fdatasync(r2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x4}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000030efc4)=[{{0x0, 0xfffffffffffffe82, 0x0}}], 0x1, 0x0, 0x0) 18:05:41 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000140)={0x7fff, 0x3000}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) [ 790.391355] audit: type=1400 audit(1562090741.782:138): avc: denied { map_create } for pid=2157 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:05:41 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x2, 0x200000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/203, &(0x7f0000000300)=0xcb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x18, 0x33, 0x4, 0xf, 0x8, 0x10000, 0x5, 0xfa, 0x1}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100000000000"], 0x3}}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x7ff}) 18:05:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7a, 0x0) 18:05:41 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) r3 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x2d, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000003040)='ip6tnl0\x00', 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @broadcast}, 0x10) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000038c0), 0x4000000000000a8, 0x0) getsockname$llc(r2, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000003c0)=0x10) r6 = gettid() ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000300)) tkill(r6, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in6=@loopback, 0x4e24, 0x10000, 0x4e20, 0x0, 0xa, 0xa0, 0x20, 0xeb, r7, r1}, {0xfffffffffffffffd, 0x8, 0x4, 0xff, 0x2, 0xffffffff00000001, 0x3, 0x1ff}, {0x8, 0x80000001, 0x4, 0x100}, 0xe7c, 0x6e6bb9, 0x2, 0x1, 0x3, 0x3}, {{@in=@multicast2, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x22}, 0x3501, 0x4, 0x1, 0xd1, 0x8000, 0xffffffff, 0x1}}, 0xe8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}}, 0x3, 0xffffffffffff425e}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r8, @in={{0x2, 0x80, @rand_addr=0x3ff}}, 0x0, 0x3, 0x1309ee3e, 0x3, 0x8}, 0x98) [ 790.496725] audit: type=1400 audit(1562090741.812:139): avc: denied { map_read map_write } for pid=2157 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:05:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 18:05:42 executing program 4: mkdir(&(0x7f000002b000)='./file0\x00', 0xfffffffffffffffc) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x2, 0x7fff}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r1, 0x4, 0x8000}, 0xc) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x140, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'team0\x00'}) creat(&(0x7f0000000000)='./file0\x00', 0xcebb6074bb566d03) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x5, [0xffff, 0x8, 0x3, 0xe262, 0x8]}, 0xe) r3 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) 18:05:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x4, 0xaed15cc1b3567f61}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x2, @mcast2, 0x5}}, 0x80000001, 0x3}, &(0x7f0000000200)=0x90) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @empty, 0x1000}, 0x1c) 18:05:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc4, 0x0) 18:05:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) [ 791.173740] audit: type=1400 audit(1562090742.192:142): avc: denied { read } for pid=2406 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:05:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:05:42 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x101042, 0x0) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x6, 0x8) tkill(r1, 0x13) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 18:05:43 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@deltaction={0x4c, 0x31, 0xc, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x1f}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1f, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x240440c1) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0xb, 0x6, 0xffffffffffffffff}, 0x14}}, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000380)={0x68, 0x42, &(0x7f00000002c0)="b3e20e355b742458f1f9f4af72f72f3ee514825ec2e5afae893d11a889092d3868d3b49320a324d061e3d5ae03cabd3ddfdda0bbfcaefeb5d62bea70ac8c563e6e5fee3d683f7ab4d3d6918e6c38ce02a889f5595ebb7f47c54f046581d56d1e9adde66209aa343dad1bb18e903e5fda64079e79ec025b9d311fef72d2f209c3ce18c4bbefb26404f794832c7675539aa0ee93c0ba7bbaac5c8b133962d5fd7bddb04fde7799d121767f1a41b24aff6bbb2ba7378425", {0x3f, 0x400, 0x7347575f, 0x4, 0x9, 0x40, 0xf, 0x7fff}}) 18:05:43 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000003c0)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1f, "d4234cb60e0960b266218e2aa0dedd3e94bf42a147601e74b9bade8fcdd936"}, &(0x7f0000000180)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={r5, 0xfffffffffffffffd}, &(0x7f0000000380)=0xc) [ 791.568817] XFS (loop0): Invalid superblock magic number 18:05:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8]}) 18:05:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca1055e0bcfec7be070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x4001fe, 0x0) flistxattr(r1, &(0x7f0000000080)=""/64, 0x40) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x4, 0x7f}, 0x2) creat(&(0x7f0000000240)='./bus\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./bus\x00', &(0x7f0000000280)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x2) [ 791.709042] audit: type=1400 audit(1562090743.092:143): avc: denied { create } for pid=2857 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:05:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe0, 0x0) 18:05:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 791.814216] audit: type=1400 audit(1562090743.152:144): avc: denied { write } for pid=2857 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:05:43 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000180)) getpgid(0x0) read$alg(r0, &(0x7f0000000180), 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x855ad000, 0x3e0000}], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x170b52c4, 0x7, 0x8000, 0xd264, 0xff, 0x5, 0xd7d2, 0x80, 0x0, 0x1}, 0xb) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 18:05:43 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000480)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xd0, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x13ef}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa1b6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffeb28}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:05:43 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x80006011, r0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0xa11, &(0x7f0000000380)=0x0) io_pgetevents(r2, 0x0, 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={0xc7fa}, 0x8}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x400002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000680)={0x6, 0x0, 0xfffffffffffffffc, 0x2, 'syz0\x00', 0x3}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="728dd0dd65e69605aa4564031d324e00262448d0c8cfaf544395b993bf3ed82db17b9ca77899812198efe6f02f5cffd4c829cab5e0a51bd02669481c3f66c16f9a6eec95c93b73d22724a8a04906e8572043d45b2ff56987e293aa43ebae18b7250f0dd1948ab0867356253329741958c603c0d09189d340ebbd49b1c1938e49ac1d8b46fdd9473876f58903d8067aa440d7c3814e41a0dded6a6952e1685d759ec5bb8d7973604a5519c535141e9d", 0xa2) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r6, 0x6, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0xb89}, 0x8}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x20, 0x70bd27, 0x2, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffffffffffffffc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20040010) [ 791.887084] audit: type=1400 audit(1562090743.152:145): avc: denied { ioctl } for pid=2857 comm="syz-executor.3" path="socket:[188402]" dev="sockfs" ino=188402 ioctlcmd=0x5460 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 18:05:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:05:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x110, 0x0) [ 792.375349] XFS (loop0): Invalid superblock magic number 18:05:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) close(r1) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendto$isdn(r4, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, "9d02609efa3d7c2d1275aa4ab32ad9e26f95eaeb25fafc15a11366384f955755613fd40526194dfcce27c8a766792749c1dfd2caf209a9cc"}, 0x40, 0x44000, &(0x7f0000000040)={0x22, 0x7, 0x10001, 0x1, 0x18ca20000000000}, 0x6) ftruncate(r4, 0x200004) sendfile(r1, r4, 0x0, 0x80001d00c0cd) 18:05:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:05:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="488660f7a4531c867e0000150000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c00010069703667726500001800020014000d00ff010000000000000000000000000001"], 0x48}}, 0x80) 18:05:45 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x10100, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000140)={0x0, 0x1, [0x1, 0x100000001, 0x7b4f, 0x4, 0x5b6, 0x2, 0x8, 0x8000]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x8934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x150, 0x0) 18:05:45 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x80006011, r0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0xa11, &(0x7f0000000380)=0x0) io_pgetevents(r2, 0x0, 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={0xc7fa}, 0x8}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x400002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000680)={0x6, 0x0, 0xfffffffffffffffc, 0x2, 'syz0\x00', 0x3}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000040)="728dd0dd65e69605aa4564031d324e00262448d0c8cfaf544395b993bf3ed82db17b9ca77899812198efe6f02f5cffd4c829cab5e0a51bd02669481c3f66c16f9a6eec95c93b73d22724a8a04906e8572043d45b2ff56987e293aa43ebae18b7250f0dd1948ab0867356253329741958c603c0d09189d340ebbd49b1c1938e49ac1d8b46fdd9473876f58903d8067aa440d7c3814e41a0dded6a6952e1685d759ec5bb8d7973604a5519c535141e9d", 0xa2) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) io_setup(0x8, &(0x7f0000000100)=0x0) io_pgetevents(r6, 0x6, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0xb89}, 0x8}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r7, 0x20, 0x70bd27, 0x2, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfffffffffffffffc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x20040010) [ 794.631246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21412 sclass=netlink_route_socket pig=3162 comm=syz-executor.2 18:05:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) [ 794.735077] XFS (loop0): Invalid superblock magic number 18:05:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) socket$bt_bnep(0x1f, 0x3, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x30000, 0x0) ioctl$NBD_CLEAR_QUE(r2, 0xab05) ioctl$FIONREAD(r0, 0x5437, 0x0) 18:05:46 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x20000) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:46 executing program 4: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000000)="2600000022004701050007e58880e80900006d20002b1fde70d0921cde1f00c0e9ff094a51f1", 0x26) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000000240), 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 18:05:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 18:05:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x160, 0x0) 18:05:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 18:05:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x180, 0x0) 18:05:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 18:05:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]}, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='smaps\x00'], &(0x7f0000000340)=[&(0x7f0000000100)='keyringposix_acl_access\x00', &(0x7f0000000140)='smaps\x00', &(0x7f0000000180)='?\x00', &(0x7f00000001c0)='smaps\x00', &(0x7f0000000200)='smaps\x00', &(0x7f0000000240)='$\x00', &(0x7f0000000280)=':\x00', &(0x7f00000002c0)='(](\':selflo\'$nodev$em1(GPL\x00', &(0x7f0000000300)='-vboxnet1\'+vboxnet0*,)vboxnet1@bdev#posix_acl_accesshtrusted-\x00'], 0x1d00) ioctl$SIOCNRDECOBS(r0, 0x89e2) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 18:05:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8020400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="200628bd7000fddbdf25040000000c000100080001000a000000080006000400000008000400ff01000020000100080009003800000014000300fe8000000000000000000000000000aa1800010008000b00736970000c0006006e6f6e6500000000580003001400060000000000000000000000000000000000080005007f00000108000800020000000800088008000000080007004e220000080004000101000008000300020000000800030000000000080007004e23000014000200080008005e1a000008000400faffffff"], 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x800) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x6a}, {&(0x7f00000007c0)=""/242, 0xfffffea7}, {&(0x7f0000000380)=""/239, 0xef}], 0x4, 0x0) 18:05:46 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) link(0x0, &(0x7f0000000200)='./file0\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r2 = dup2(r1, r1) sendmsg$alg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) write$P9_RATTACH(r2, 0x0, 0xfffffffffffffef4) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffff45, 0x1f4, 0x0, 0xfffffffffffffdb9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0xc48f713904e1f03c, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18:05:46 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x40, 0x50) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 18:05:46 executing program 2: r0 = socket(0xd, 0x810, 0x80) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x101041) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@abs={0x0, 0x0, 0xd0000e0}, 0x64) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xfffffffffffffffa, 0x202100) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1}) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x1) [ 795.328675] XFS (loop0): Invalid superblock magic number 18:05:47 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000004000er_id=\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="0000000000010000003d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$net_dm(0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') umount2(&(0x7f0000000600)='./file0\x00', 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x10000, 0xe8f, 0x8000}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000003c0)={0x5, 0x8208, 0x5e, 0xfffffffffffffffd, r2}, &(0x7f0000000400)=0x10) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x1400) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000680)) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') chdir(&(0x7f0000000180)='./file0\x00') inotify_init() getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000540)={r2, 0xffffffffffffffe1}, &(0x7f0000000580)=0x8) r3 = syz_open_dev$midi(0x0, 0x0, 0x40) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000480)=""/183) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x4, 0x400) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000640)=0x8040, 0x4) open(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1, 0x805, 0x81) ioctl$CAPI_GET_SERIAL(r4, 0xc0044308, &(0x7f0000000040)=0x40) 18:05:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 18:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x280, 0x0) 18:05:47 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x101, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) pipe(0x0) r1 = socket$packet(0x11, 0x3, 0x300) pipe2(0x0, 0x4800) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfef5) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8012, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000000)={0x4, 0x1}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:05:47 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000140)=0x7c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) link(0x0, &(0x7f0000000200)='./file0\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r2 = dup2(r1, r1) sendmsg$alg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) write$P9_RATTACH(r2, 0x0, 0xfffffffffffffef4) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffff45, 0x1f4, 0x0, 0xfffffffffffffdb9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0xc48f713904e1f03c, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18:05:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803]}) [ 796.002661] Unknown ioctl 1074033746 18:05:47 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) link(0x0, &(0x7f0000000200)='./file0\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r2 = dup2(r1, r1) sendmsg$alg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) write$P9_RATTACH(r2, 0x0, 0xfffffffffffffef4) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffff45, 0x1f4, 0x0, 0xfffffffffffffdb9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0xc48f713904e1f03c, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18:05:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 796.092443] XFS (loop0): Invalid superblock magic number 18:05:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffd9e) clock_nanosleep(0x0, 0x0, &(0x7f0000000180)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2d4, 0x0) 18:05:47 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0xfffffffffffffff8}}], [{@smackfsroot={'smackfsroot', 0x3d, 'ramfs\x00'}}]}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:47 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x9) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x21) 18:05:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 796.574448] XFS (loop0): Invalid superblock magic number 18:05:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008000) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) link(0x0, &(0x7f0000000200)='./file0\x00') getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x06\x00\x00)\x86cJ\x0f\xef\x00', 0x10) r2 = dup2(r1, r1) sendmsg$alg(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) write$P9_RATTACH(r2, 0x0, 0xfffffffffffffef4) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffff45, 0x1f4, 0x0, 0xfffffffffffffdb9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0xc48f713904e1f03c, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) gettid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18:05:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:05:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nr0\x01\x01\x00', 0x2}) seccomp(0x1, 0x1, &(0x7f0000000200)={0x6, &(0x7f0000000140)=[{0xfffffffffffffffd, 0x80000001, 0x1, 0x20}, {0x10000000101, 0x9, 0x7fff, 0x3}, {0x100, 0x9, 0x202000000000, 0x6}, {0x234b, 0x6, 0x20, 0x1}, {0x1, 0x0, 0x3f, 0xcf}, {0x46, 0x804, 0xcb, 0xfff}]}) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000240)="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", 0x10d) getsockname(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000003c0)={0x0, 0x0, 0x724a6c0e}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000480)={'filter\x00'}, 0x0) flock(0xffffffffffffffff, 0x0) pipe(0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7}, {0x16}]}) [ 796.633392] audit: type=1400 audit(1562090748.022:146): avc: denied { map } for pid=3911 comm="modprobe" path="/bin/kmod" dev="sda1" ino=1440 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 18:05:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x300, 0x0) 18:05:48 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2, &(0x7f0000000380)="11dca5ec7be0700000000039f7290850ba911fcdd3b98e185a686e4d3b4b77f3bacdcd9c355e1ca7c8e9098a93ff7fcfd8fcdd89f9c1b82266ee7a79ce7ab4adfb971ebb869a6d9c165dfe4762c1d905e5d493bbd297de050b5c2850578d561e5927463e162f74b8f93f49bba5f1ea1baba1e2914f45b283d0a36c9b48d0ea59d8db5dbb7e0de1cb794796d2dd46a39f9e02222cc74584cc4c2a6f72c067b21d77935f31437095f848b797bc7794c550c4a0fc38de325e625775c5acb4dbf0e82a21783c87fbbf78bb84da91595135b9a2") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x18000000000, 0x200000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0xd2, 0x0, 0x3}, &(0x7f0000000540)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x6}}, [0x8001, 0xfff, 0x5, 0x1800, 0x9, 0x2e9, 0x0, 0x9, 0xfffffffffffffbcc, 0x8, 0x8, 0xf9, 0x8, 0x8, 0x200]}, &(0x7f0000000680)=0x100) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) getgid() ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000000000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 18:05:48 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x4, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x7f75, @ipv4={[], [], @remote}, 0x4}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x1, @remote, 0x8}], 0x68) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) 18:05:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:05:48 executing program 3: getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)=0x0) syz_mount_image$jfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x81000, &(0x7f0000000380)=ANY=[@ANYBLOB='errors=remount-ro,errors=remount-ro,errors=continue,umask=0x0000000000010001,uid=', @ANYRESHEX=r0, @ANYBLOB="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"]) socket$inet6_udp(0xa, 0x2, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x0, 0x0) 18:05:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 796.934708] XFS (loop0): Invalid superblock magic number [ 796.971397] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:05:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x4000000000000000, 0xf739, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x97d1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0xd) readv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 18:05:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xf4fffffc, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") [ 797.068696] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 18:05:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x320, 0x0) [ 797.150273] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 18:05:48 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) r4 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x10001) statx(r4, &(0x7f0000000140)='./file0\x00', 0x7000, 0x800, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 797.203766] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 797.221284] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 797.239461] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 797.276625] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 797.284004] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:05:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7379b43198d8d4178c1d12c15d6c1500"/33], 0x21) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000180)) recvmmsg(r1, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x378, 0x0, 0x0) [ 797.317235] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 797.341371] EXT4-fs error (device loop4): ext4_fill_super:4395: inode #2: comm syz-executor.4: iget: root inode unallocated [ 797.387766] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 797.401190] EXT4-fs (loop4): get root inode failed [ 797.420685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 797.422041] EXT4-fs (loop4): mount failed 18:05:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x80008001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r0, &(0x7f0000000080)="b63db85e1e8d020000000000f0011dcc606aed5ed2bc7018cebc9b97ae21b14d872c678ce22c9b16004bbc69146d17", 0x2f) flistxattr(r1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x400) splice(r2, &(0x7f0000000100), r3, &(0x7f0000000140), 0x3, 0x2) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)) 18:05:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r3, 0x1ffffffffffffff8, &(0x7f00000003c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r2, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40017642c1) pread64(r4, 0x0, 0xffffffffffffff4f, 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="ae", 0x1}], 0x1, 0x0) 18:05:49 executing program 3: ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000012c0)={{0x2, 0x4e21, @remote}, {0x306, @broadcast}, 0x20, {0x2, 0x4e24, @multicast1}, 'syzkaller0\x00'}) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x3000000b8160102, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) wait4(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) mount(&(0x7f00000002c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x100000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000180)={0x7b, 0x0, [0x800, 0x8000, 0x101, 0x8000]}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000200)="11dc860d0f8eceec7be070b6806b1ef834b495e445179e558b892aab98a7a00b401640895715770623fa86067c218f31fc0eadad9056027bb20dd26e8591dd2e1be51de33b484ea4375309718f216b33adb414") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000280)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:05:49 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000fbf"], 0x0, 0x4}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x8000000000000003, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x102000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x6, 0x100000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x370, 0x0) 18:05:49 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x807c}}}}, 0xa0) close(r1) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/110, 0x6e, 0x0, 0x0, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000000c0)=0x6) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x5, 0x8, 0x1, 0x8, 0xb4}) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:05:49 executing program 2: setgroups(0x400000000000033d, &(0x7f0000000100)=[0x0]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x40}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @broadcast}}, 0x20, 0x7ff, 0x9, 0x6, 0x89}, 0x98) socket$inet(0x2, 0x2, 0x1) 18:05:49 executing program 4: r0 = socket(0x10000000000003, 0x80803, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 18:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x380, 0x0) 18:05:49 executing program 4: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x20480, 0xfec0000000000000, &(0x7f0000000180)={&(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in=@local}]}, 0x38}}, 0x0) 18:05:49 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x687f, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x81) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000001c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) openat$vimc2(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/video2\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000001480)={0x0, r0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xff, 0x101001) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={0x0, r3, 0x16, 0x3}, 0x14) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000014c0), &(0x7f0000001540)=0x60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000380)="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", &(0x7f0000001380)="a7665684eac15f60d4e2d7b088acce1d3506778ec7e632e6a52398d2636db25a256dbef8bd9cbe7fab500ddc97af4f9d288a851f83c711063b70ca2119e55c68c176cf661a781f1a8d2aef1870034f3047bd1700e3942458118a62d7b08a156def0262054af2a227e282105f4d2dcd9133c8a37c2a1cc7ea1b0ac6343761675027bda57d285f5e15c1501b4190964b0012593fd43893047986146b471534e5600e194c5f7d0e74fa81057311140d189eadcb17a466c63a614bef4b03cb91498c5bae1c621de8e41f93277d", 0x4}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:49 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="00000046a9fff3dc8c38ac92251409fe03a5efc95ffbc3e24e486a9f2af4bc19bf68dad33625978fa8b8c78164c4101155f042ee3be89bf755aeb893fc8dff77c5e0171029719f44cf8497a69c94fb6983aad3d120b47d1118462af7123338642340fd9b1da706132aed5eab0737943254287df80efd1571d808dfe1ab78ffbc817c294f17a9e944f6ff00"], 0x0, 0x41, 0xa7, &(0x7f00000004c0)=""/167, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 18:05:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/unix\x00') ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 18:05:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) write(r0, 0x0, 0xffffff7e) recvfrom(r0, &(0x7f0000000140)=""/183, 0xb7, 0x160, 0x0, 0x0) [ 798.233082] XFS (loop0): Invalid superblock magic number 18:05:49 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x165140, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0x4d, "c208165df6cff3b8a44207991586d7e77aa15e1f30384e07f4e2ef40d26a591ff7c6a8c2c289852406a164d027174c77d1d2f04cdd4a647bb86124e68c8d6283bc060f682e749254651eb56b23"}, &(0x7f00000000c0)=0x55) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0xc0000}, &(0x7f0000000240)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x210000, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = socket(0xa, 0x1, 0x0) socket(0x9, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x4, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000100)=@gcm_128={{0x307}, "c85ea742abcbb4a4", "c6cd919cece3f7ec3a7685a86af9d483", "f4efbd72", "2c09251a469cdf02"}, 0x28) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000180), 0x4) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000380)={0x4, 0x5, 0xfffffffffffffff9, 0x2, 0x6, 0x4d84}) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 18:05:49 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x82000, 0x0) write$P9_RMKNOD(r5, &(0x7f0000000180)={0x14, 0x13, 0x2, {0x8b, 0x0, 0x8}}, 0x14) ioctl$KVM_NMI(r4, 0xae9a) accept4$x25(r2, 0x0, &(0x7f0000000100), 0x800) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000380)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x1000000000000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:49 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000140), 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r1, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x10013, r1, 0x10) listen(r1, 0x7fff) openat$vimc0(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10080, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000100)=0x2) 18:05:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x398, 0x0) 18:05:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x101800) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') pread64(r0, 0x0, 0x0, 0x0) 18:05:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 18:05:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dc86055e0b487906b02c777fa51bdbffc15a7fb7f1180150930e3517a4ca5073b8180f04a75834b7c9e2a59e010d") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x10000000000025, &(0x7f0000000040)={0x1}) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) fcntl$lock(r1, 0x7, &(0x7f0000000000)) close(r1) close(r2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x0, {0x9, 0x6}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000001c0)) 18:05:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x400000000000d) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[], 0xffffffc0) ioctl$TIOCSETD(r0, 0x5437, 0x0) [ 798.580786] XFS (loop0): Invalid superblock magic number 18:05:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xe, 0x2, &(0x7f0000346fc8)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x7}, 0x10}, 0x70) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000080)=""/74) 18:05:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 18:05:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f0000000080)=@access={'system_u:object_r:dmesg_exec_t:s0', 0x20, 'unconfined', 0x20, 0x4}, 0xff1d) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) 18:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3d0, 0x0) 18:05:50 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) fsetxattr$security_ima(r0, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@md5={0x1, "585913b96bb5c228a289c80bf8d1ec6f"}, 0x11, 0x2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 18:05:50 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10, 0x800) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e24, 0x1, @local, 0x100000000}, {0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}, 0x1, [0x7, 0xb37d, 0x10001, 0xf63, 0x2, 0x80000000, 0x81, 0x7f]}, 0x5c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={0x0, @in6={{0xa, 0x4e21, 0xe, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x7, 0x0, 0x0, 0xa6}, 0x0) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0xfff) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0xff, 0x7ff, 0x9, 0x7, 0xc0000000000, 0xb8, 0x3, 0x6, 0x7, 0x8, 0x100000001, 0x2, 0x1000, 0x6], 0x0, 0x80000}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x159) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in, @in=@multicast2}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0xed3}, 0x8) getpgrp(0x0) setpriority(0x10000000000000, r3, 0xfffe) getsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000200)=0xc3, &(0x7f0000000340)=0x4) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='proc\x00', &(0x7f0000000740)='!\x00']) r6 = shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffb000/0x2000)=nil) syz_genetlink_get_family_id$fou(&(0x7f00000005c0)='fou\x00') shmctl$SHM_LOCK(r6, 0xb) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 18:05:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80400, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000080)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') listen(r0, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffde7, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) getpgrp(0xffffffffffffffff) r3 = getpgid(0x0) fcntl$setown(r2, 0x8, r3) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair(0x15, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r2, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0x1f, 0x35690f99a8db4d16, &(0x7f0000000000)={0xa, 0x0, 0x10000000003}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0), 0xfffffdda, 0x8dffffff, 0x0, 0x0) 18:05:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000]}) 18:05:50 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x10000, 0x4, &(0x7f0000000600)=[{&(0x7f0000000380)="10c871d5be6d8b74dd4dd0ee66f7091cf9088f7f6d21deef9e188ff9e961b90e3da763829811eb8166ee35c8b910ba0ca312f0449d5d4fd77eaebbcdc90c900b00d824fa7b43caf023a108f7211b9ebe7e9edcea75681f6169ac7c2ea48c808686efb31937a0c23051f21811db2cf380deef6c9a64029b6482473ee9334a87335d0b3f66b7cbea3d2a4b891646a3c9a5eb9dead063a32a16543c4ed1c62c46cc575ee517a686a89907e52f0693508d5e1b2987a4cf9865526aa64072736710f2c06ca57d5435d62c65f486da947d964c4f10f53d9e1205e1b60b702521b5e08225292996544dcaf5", 0xe8, 0xf4d}, {&(0x7f0000000180)="ab6cf1861034f1a7f5693c689d65f87aea47b19f9e87c4a7e79fd547", 0x1c, 0x9}, {&(0x7f0000000480)="6853998af0512544e4fd911411844b8495d39ec6c7ce4aceeb3082d8e0f3aae7d1b2b1dd77df43358b08fd0be746b31e2097037ccd1974095b986ebb7636bca31870901443eacaf9c686e066cb2457a4cc33d582af3bb77af4d06a4d4a0919b4ac2a19b6ca0eff4162b081a910858d78725f303bf3a8890370e445de396cf506b7d61b43d23b5cf7ed2184eeb1ba4065623426076e73eb50e9adec8dce6fa357c7784c844b2f283171b252aeeea26d356ee6752fec89643c0048f3d2c80eaf17761f911e2f3a164bfa94fba41cfb1253", 0xd0, 0xfffffffffffffffb}, {&(0x7f0000000580)="a0adc259c7d62d387a439b178a60c6ca86b7752ae38bf7e1f9eeebe31b8e01cb12c6ec2292af8cf65fa02f1985e51a8bf6920405b14af6949fa61b36008466291c3017dd9c4bdca4974f3e5488ef70d396f7", 0x52, 0x8}], 0x800000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 799.032086] XFS (loop0): Invalid superblock magic number 18:05:50 executing program 3: r0 = memfd_create(&(0x7f0000000180)=')\\\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRESOCT]], 0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x0, 0x0, [{r0, 0x0, 0xffffffffffffc2b1}]}) [ 799.228754] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop5. 18:05:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000001200)='/dev/dri/card#\x00', 0x0, 0x0) timer_create(0x7, &(0x7f00000010c0)={0x0, 0x16, 0x1, @thr={&(0x7f00000000c0)="f04de26e98d1088ec0e243b98068111eef7d664c2881f35196f753dc8d82ecc5d2f2b35eac2ba3c7b329d39429658abd5bd29ded2aa1cbf616d1b988afaba8e8950d01db6b9a1b530c982d83e776bc5671c84fadc846c3abb0d01103b3d36d7c474f70278787c4c17c54c5f64492df1c24dc8b2c249f5426c3ced8a92f322736b24ef96e48ea86b10383cd6996d4e6ae41df27fa460db86d0aef26cdebde776c2109875b03d8c9d8bbdb8c93e3608dcde5e71122733572ff0ec6cc81b426d5ee61c88b16311c580481828b438b5cb4a1bc3266a072a6915a2d2e075fe5ff86ff90c685329f05c437a62160144eb6444567dce19f2fe517b9f775e44336c311b23c05f90c6d6ea738ca169a25d4a2bb357c9e06756b26d08053a0f953e3f1087aa29a51376dddff046adc314beec1ba51e812ef4e94bbabb7f1a0887e9c61f9bd11835095fb28b63dce1fb09a3427aa6469123650f3148460490c985db33ad6d87391d15d1df9b3af58c6e295da89e705f42c2067314c27e278cd39fb34de73125ddbd2d0fca836fac358c9693684c42831b4aa268dbb1b4f525a8076fc06dfdc58d190e29fbd2d56623fa8afe3be73c933dbdde63bd4cf8cb73d447363edee31f55109315f3d6c905bf580d098481976d5d79f30d59f2ae02d35139b606ffc6ece6db0147d96d192fcf7b09367a075b86d1282fd15a3bd8c7ebeb51303b926499fdcb8b900e856998ceafe1be500fd0b61b8a8eb3e1a334447890cc2dc9d564ac20d083417aa9e26dc4308220306f59753421341f2a7807a76b6cbedcc52d94ec7e817e0aa33f3b8c161a126f8bff546ef9c8bf92c229cdc9405b869ba724d9bb14c80cf22fca245428dc618c6c459c656dadef9df104b49a6aba37018c64fb9f8a88bcc92d413da0c4b626360bf9ccfe5fbc9fc71c79e4dcb7ce17815de6d5a36339015c0a80f28e77fde68ecb85d51a5a87f58286369de2774435c82503abb18a303656eff954be17d338806430a120e817e2dd1b3632f5e349fb003c07fcbc4ce45e81a5b512e63fb9faa6f461e3e4ef568f7223503dc8123c59c71de0d97c2f46d85d6df7b78680a51987491860c31b0ff2cee72e8655f586cb242bbef5ed4edcfda07971fb4c7d2cd981e903e127d28ae7adaa805cc54e3a2ed228a05855dd874b347b7de279bd6cb19a41097402ba98747c6c1eceb2ea5a4d7e90971314ce9a8f968d45b66f32e2b8c0b76a8ca39b8c1ecf5f27cf5e63ce1a909cf3efb60a7124cd7de15b626d8f79131d21838cbe8f71f883d8c057b94c9fec55a7cae523590c52427046d6c7b1715a0bf43d76c6c838429450958347fdd91a2c391d1e376069c52db12c1a4090a1de569562fe7390a34b295e20d181a7867677a5568eee0517ad607ad2688289dd535c7e9b0806ef4d2a436aba388e4719bb14f23770fded708b44f8b661b29d2a85ae5a740729fdba959a56b33b6ac7eb58663c37c5e3ae25e695b02435adf2905fb5b32c535741da47a32774deadb6e2d081bff0c802d3d2b10ab3b02c30577098e97437297dfd68a5604445ce650e9cfd3ca5a371de36287301d5a79d62cc18ad8e715d3eaf4d4e7139b19a2f0fff1072a62c16bd742ecd99694195839ee5ee4affe66913e74e905f358598b6cf1c5c3e30a21df20e3c9a1537cf64d661cbbc2bdbba16c4ade2fbde8c103997224e5d188ee5bf523ed3ca580cc8a4ce5fa97a456fb89e8abc270e5ad9d25b86d477a22e334234fd772059d09c56fef587a7ed92704493a63b7dcc242745478a369a1b2b3a2211fe41184b57bb35e9223674c5e540fa0c81f8e36006b1e2db3da5e8555f894a0c0e4760549a8eef04db1e93584f89076d1fddc67b311cd8b6178f9902dc67a27f6947b5c3800cb60db488986dd7326594e02e9255f611488bc2588a2e9e79c2e05670565ac6ad27dac6738e95e6159d68be81c0f51f91882bad242df0445c845e9c0b9cfdc7f334fe075bd970f9868753e9486bdc6829b606e3cdbdc806fb583c46ab22730bdd27ff562380b69d47b4b4c88a72b8f62406725f30af4a5cb2feced56f3d797914328f7c89db1f14830b894ade5d93298fcc27088c6a4a17394f7e98fbe0f47c4c3534b9064d9abf4fb6cee38ce928edb96cbeb8422794333a4b29b6ff47c01e947e2c0f4ba7f4172f67a8d8c6795adfa840b931200f8ef21e6e0833e252b89dc7ddfd2bde47b6bbf4fc487f9efabb7de8bfc096729519cfe4df864b14e573ebbbff4138915cfc5f4af2ba765884d016fab6fe9bfba25382c969d692cdaf2daaeed7aa3e5f830fcce8fdca1a543aebf51d5053359e5ed6fc124d535c5ca7a79acfc5cdd9afc47da60778e7b5edd5e490ef7803abce3ea9f2a9875f66bd1b1ce72bd9e2373b3e56a17b2281ba3413d7e35012e66454c07de342eb2692feb2e5bacbdb93d51b495cd8ce002d7e22adbea32aae618f6b9a5db54099c90d799be70c7b254fb5ee6ab539fda26355e79c3039f1d4fc03d5628bdb615db8cd2016fe50ad1e431073fe436fed510fd7a9eb164c2ede054e5da8c072fcdec9e7ac90d157984d1f18daaa54eeaabce8c45ae0bd92601364c1937065fa0e29f9bfaff8cb47d4e7a5583e60278a147885b1b8e1099b30f38977c2bc8826815cf0fb8e93ec9b4cd3d92500c197a47cd5ebdf863da5df8dca054026b4d29916e4fc117aa8c57ae4222b61d8e69e6ff37f5d3112d7e8c46375ed4d72a290d55876e22f6bb165e146ed2c8c343c15ec684e677e0913012e2fb79c3ac169ccc0646b7902009eda750b3ae969e2eaa69380bb99a853f3c28742f778c7f31b9da96d1cac291b1065a1e828b5cd68ec93e44c94730169560410c272091d73a661a09239e91e886aa81d51f12b1f948bffc3802626434fe91d22572f7d73cfce4b065ebc266f1513643a8ebe4a9f296ccd538e862998354fca6123cf559b7314b18e3e2945e4b54f5cf9c7a4cc6b0f3e2fb5b0dd1d76a8c8d684b4839fe77fd29361c53e3f750988ffae095d02d52fc6c3b79e2a35c774e97394dc0604f9349fb3b6028519de323ecb6dad7ae5d397ed60d7955f548b0c2626be2aa4b8ae06e2a6733f79ba721696b394b3b4be7eaa6f01dbd802fd4ab44bc850983589283e97beef464ed1351d26bdfff5c9e5fbbdd126b5ce3e75cd3cfc83f7d56e6077b8b9e6b8d0e407f6500b8e824d10d1288c70b1952244d28a0effa14519ebc4840c12ef4d6b9c0b301c863d3feaa4b9444bca57ecc313f42d22504df82048558fd0127f42aeb6b915062593d90dfaf488cd1ca719167c3a591cc3c68ee8e03db63987220ded4783a3242c4c358673753406285ebf20918f3d80f5895edec3b8a1cd8b09911379aa4d8da72983a2f79413e5c33280b2d515d9602fd52e7c1e9b607de039c0965801e25856311bd1fb1eef93897e6e62fb5964beefd13b81123c8943fde77ef18f1f0473d77dfb95dffcf70e3e7ccafbc53b73532021e4983d2c813b32958338d90e7bde90d71534716a89e9c63c3bb5321e5762c2f63bca0b1a1ca0906a4d9aba4ff075f267681a00d0396e4719da383e152ace38cfe2082a5e43cb1d560a0c14643e3b64e0f832466808b011ff578bd30a04532db46ce786df7aae189abc583c1604bc0cd5492319a2387a86a60ffe386f0d08c8bce6d086b2f7a45ac60435b2a545698275aea7aebda6a2cd6b6e926058fcf9383d0eb79f80e8ea67c8e0f919b007982902db4009e34d3dcd4e99b739ccea269ac980a3106b63e220d9914ce9342aecc45a63dcc6adc4dd3b33c846cfe0472222c764db278692045517ac87b8e00eb41be998d04d7d4bc773b3a84c1ef5b7dd5a6c227f35b77cc9a19041f93b4a350c52ce3b41ab025c480eea33ad6e9073554225b32b496a9f199d7c4eb0cf0050963e20a3b6bfdea1fa11780facff355c269ca0920cd2bed72c14ca5953f2b03bb181cd73a6b6a908b2ccf92e1cf95f2889f3c5793dbb7ea6906ef145965d08272b012dba36dd729d4bd4ce58faddf942f14004aab793915af2514f76e4062ebf18975b09f7a1af3f7855eff849084ca4451ad78f8a7c32b9b9820ad6fa9da06573366817a360d3dca332549c04ed36d267d62133139589c35fbd0ffd50605ec31fba73c77b97a938708949e01d773250eeb35343441a7ce75bff39211fca6314637e685de8406b8cca6304484e16e660f43d6ab86c88ff4ad6c104d711e65c835ef6de0f2a1359ad300c3253170f04aa54e1714a59ed0b803c71cf808bbf40f8d9965e07ae4a390e18980bef4a1a33cf306769a1b5f33922afd180698ebbf3b9339488466209c9bd1598dfc61e8f66135be37655a0c337e44b485032071b753db9511909ea9845587cdcaab677b4b47aea214ce7b540ea233db61269034ace7f3558a82ebb87dcffa21c3b77b50920fce7d889533455e57a5cce6ffc1cbd467819361309d5f274e2cba8d996aa04a1f39327934fae82eb71f53dfebcc81ae1f2ef4d2f544cc5de0449f5bcfe25bf7d678bcca1444e2e9f4d83468d7fa2c2ccabd354520af1f1b12fa4b75ddb9168b76c4c908d1fed693955f49343fd51fe1e7e99f718bac24fd62d08256abc00eec0732e2877711f95873bde099d7f4c5b39f17ebf455e0107a1d8bb704a06407bf6731b910b393f24dc3d53204483983a18f7db2a0049ff334ef0a66379dc888463d1039fc7077c2976836ea5dac8f158c472661a1eb7f0b31f7fe3257c0d90979eda7fef04345355375ef5f91b5b7588054aa91ad4f3a793f2d444a5b5bf584896f50be5fab4f16a6f09047c658f6a6534d28eb55c2019ed5e984755fc8ce56bd5c07beeaf40c544990551ccee6ff3b22bdd04b0d1ca1d21203756c396f98ac16de332e3f7d6e7ee10c055897ca104546e85fee6c698e5fd6e07a3734ed677ef6701c6aae3dc7724bb6aa1bf9e487931de3a92b4b83070b145ec88592f58ea88d08654bb2a2c504c0325da0822bb2c5fa1d03da1fff318b8ce07c517f9baf68eac28a4d20289688deefdc7f4a159d0b39069e183eee379aab1a6906768829a7eab1d3545d26cd2fe7e15c1ab3a9bb2d517c2c7d19ef12ad5c6b68fa108f1d806031953e75478950c335bf1a2b607cce1906860dde6b27e8c634ff6f1d86565a94745a202cc8ae6d0b6a2b5d51f447b5c01da99942c5ccebb277491d432841ed07880c6050afcf351c199e09787f3a85aa99f2184e899e90aad15e1fc736624a82d15fe41a8971af7446ded692c9a345930a34bdb02a36ec4edc2dc810121aa2551466e7839faeedb67cac6036f5b93ce577037d9b4b9defc0777138b56385d2b35616235f456b36c334b1a8705f773cc8bbfd3840f76f22e504d1b9706486a99c73dacdee64e21a806514e52879c7db32a7f7d06dcf48b29ad93b515d032b2981fecfa6e93cc5cb2f0a639e464ca80b8fd35144df094aca91b764b3c673b7a734845eb4f52be86b21194c02d10554d020781d89945657046e4fedc3bb8f673b354ac097c0725d75ab9c6703b85609f8ea1226fa24cbbbe25d15d063fa1a7c8ef2d056a50aba876453e862a7cad33ecd342eeaad4cd0bb002d1a4cf6c95289b3735197e35c93bff1069930efd57e8ee29e2c620c335402b1ddb9913a32884e2cb4e3c89369ff40dcddde23f42106b96ef07e00bbaa853e84d73af20c29054c7699ed36ee72a7a0e7801693401fb49fa88f83a2234001187e3939a1ea17090b8d1afbea3cb5af76502fea5d698380aacc92fb", &(0x7f0000000040)="7dc3b9fafa9d48d290f8be4c4e12a60e3541936845f43436e597490c2b291b29f148da29f890f693d4f53614f51f04e7a40e0bfcef58"}}, &(0x7f0000001100)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001140)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000011c0)={0xa20004, 0x5, 0xe04f, [], &(0x7f0000001180)={0x980905, 0x1f, [], @value64=0x59}}) timer_getoverrun(r1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x1, 0x3}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000000)={0x2, 0x829}) 18:05:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:05:50 executing program 4: signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0xbf) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getcwd(0x0, 0xfffffffffffffe6d) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) ptrace$poke(0x5, r0, &(0x7f0000000180), 0x1f) fstat(0xffffffffffffffff, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x101000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 18:05:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2308000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="00003179691fcf03f7aaab0000", @ANYRES16=r1, @ANYBLOB="00002bbd7000ffdbdf251100000038000600040002000800010006000000040002000400020008000100050000000400020008000100020000000400020008000100ffff00004c0005000c00020008000200ff00000008000100756470002c000200080001001a000000080003000010000008000400ce020000080002000700000008000100190000000800010075647000e400050008000100696200003400020008000100150000000800040001000000080004000100000008000100150000000800030009ffffff080002000100ffff3400020008000100070000000800020000000000080001001500000008000100000000000800030001000000080004000500000024000200080004000000000008000300ffffffff080004000800000008000300010000001c00020008000400ff000000080002000001000008000400080000002c000200080003000500000008000200ff07000008000200e60a000008000400040000000800010003000000040002008000010044000400200001000a004e2100000002ff02000000000000000000000000000100000000200002000a004e2200000fff000000000000000000000000000000011d020000380004001400010002004e21ac14142b0000000000000000200002000a004e220000000658458a687e0003340f3713d03cb8942508000000280007000c0003006a070000000000000c000300f7ffffffffffffff0c00030006000000000000003c00060008000100080000000800010080000000040002000800010000800000040002000800010000000080080001001f0000000800010007000000180006000800010001000000040002000800010000000000600005000800010069620000080001006574680008000100696200000800010069620000340002000800030001000000080001001e000000080001001c000000080004001f000000080003008100000008000400080000000800010069620000300006000800010005000000080001000000007204000200040002000400020008000100000400000800010001010000"], 0x308}}, 0x40800) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x4, {}, 0x0, 0x2}, 0xe) 18:05:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3e2, 0x0) 18:05:50 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffef1) r1 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='vmnet1md5sum\x00', 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='*/securitymime_typeeth0vmnet1^\x00', 0xfffffffffffffffc) keyctl$reject(0x13, r1, 0x6, 0x81, r2) 18:05:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:05:50 executing program 2: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) setresuid(0x0, r1, r1) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r1}) 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:05:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3ec, 0x0) 18:05:51 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0xc99, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3], 0x102000}) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x43d4, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:51 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0xfffffffffffff7fd, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = dup2(r0, r0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000000)) fadvise64(r0, 0x0, 0x0, 0x1) pread64(r1, &(0x7f0000004d00)=""/125, 0x7d, 0x0) r2 = semget(0x1, 0x2, 0x4a8) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0xbf0, 0x3f}}) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f00000000c0)=""/151) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:05:51 executing program 4: rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={0x0, 0x0, 0x2080, {}, [], "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", "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"}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffeaf, 0x0, 0x0, 0xffffffae) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x1c86d047) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:51 executing program 3: setxattr$security_smack_entry(&(0x7f0000000200)='./bus\x00', &(0x7f00000003c0)='security.SMACK64MMAP\x00', &(0x7f0000000380)='\x00', 0x1, 0x1) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='9p\x00', 0x202010, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,r\t\x00\x00\x00=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c667363616368652c63616368653d6e6f6e652c756e616d653d5e2c6c6f6f73652c736d61636b66736861743d747275737465642e6f7665726c61792e6f70617104008df1174e917080500d6868323f0000000000006d653d2c00"]) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000400)={0x73622a85, 0x10b, 0x1}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000280)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x101000, 0x40) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./bus\x00', 0x0, 0x18}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 18:05:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3f0, 0x0) 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:05:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x401}) fallocate(r1, 0x0, 0x8000, 0x4) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x6f1f, 0x8001}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) [ 799.973917] audit: type=1804 audit(1562090751.362:147): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir730139545/syzkaller.a3AyM8/1127/bus" dev="sda1" ino=17185 res=1 18:05:51 executing program 4: r0 = timerfd_create(0x0, 0x80800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/244) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00') r3 = socket$vsock_stream(0x28, 0x1, 0x0) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000280)={0x8, 0x2, 0x3, 0x1}) recvfrom$ax25(r2, &(0x7f00000002c0)=""/175, 0xaf, 0x40, &(0x7f0000000380)={{0x3, @bcast, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000440)={r5, 0x1, 0x6}, 0x10) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000480)={0x80000000, 0x6, 0x2, 0x3}, 0x10) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000004c0)={0x5f0, "a782569c75279344a936f65c0cb1fe4604ba4f5ec10507f50813bb1bcbb8f5f3", 0x3, 0x1}) membarrier(0x0, 0x0) personality(0x600000b) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000500)={{0xfffffffffffffffc, 0x8000}, 0x1, 0x8, 0x3, {0x9c, 0x7}, 0x8, 0xfff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1c563b2c5274633a}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xfc, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffffa}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xe56}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000780)=0x0) tkill(r7, 0x33) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000840)=0x17, 0x4) sched_getparam(r7, &(0x7f0000000880)) ioctl(r3, 0xfff, &(0x7f00000008c0)="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") write$UHID_INPUT2(r2, &(0x7f00000018c0), 0x6) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000001900)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) 18:05:51 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202240, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x20, 0x6d07b23b2bac7906) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x4000000028, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x10) 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 800.078118] audit: type=1804 audit(1562090751.402:148): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir730139545/syzkaller.a3AyM8/1127/bus" dev="sda1" ino=17185 res=1 18:05:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x500, 0x0) 18:05:51 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x80) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:51 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000000}) getsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x84000, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0x80000008, 0x4, 0x2, 0x1, 0x9, 0x4, 0xfa5}, {0xc000000f, 0x40, 0x6, 0x9, 0x6, 0x9, 0x9}, {0xc0000009, 0x8, 0x4, 0x40, 0x1fb4, 0x80000001, 0x8}, {0x80000009, 0xff03, 0x2, 0xf19c, 0x9, 0x100, 0x5}, {0x80000007, 0x8001, 0x1, 0x81, 0x1ff, 0x8, 0x4}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:05:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002d00817ee45ae087185082cf040f3d7f193eb211df6e47e2c4ca86375b3f00169148790700c9be80e230", 0x2e}], 0x1}, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="054de1954037da60829346655c9fe78a7b330cfbdc790e309c2c3b05811d9f117a4c3b4ac33b13f3b4e92a35ee8dc7fb02468d6cbb8c5b296ef6f7c45d7c5269d3439b7d8889fc1cbfb4788bb973171c5301b54cdb8fcd23b0f007be8156ed7a9120e9abf827228e08c1a47f25c4357cf3725b91c52024ec6c12fdab0830dfa00387c6df993edbb6cec73a5b3028efe1aa2b212679e774eb6c0dbe1416fe48", 0x9f, 0xfffffffffffffff9) keyctl$update(0x2, r1, &(0x7f00000002c0)="0bd905639c4edcfb9b12af638f46555242bc03e7028360e22399a7c879a25051d574340d137ee1b48d6a246a43b328b384d88a0265cb6c3f3f559292a5199f1a9c5e376446cd42468f8a79136045b0c5b80961982cb8dc4de30e71a7f6de6d372c4af632b4d188e73ccba44e3b3278a954233e24a8eef93189684e8f45be0365d312d24e8e48c82ca43d8425ec33a3e947be206b0282e6ffeaea9c77b87cb40f4d6e317723b4b0e6876a53f2d32667e85d35e5ca4c1edc5a062b9481cfda9c5b8a48a25fc32a50791618f5b4883d", 0xce) 18:05:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0xa, 0x8, 0x6d, 0x8000000000000002, 0x0, 0x0}, 0x3c) r0 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x14, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x3c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x7, 0x0, 0x403619, 0x0, 0x44d8d791aa90ab5b, r0, 0x6}, 0x250) [ 800.364556] XFS (loop0): Invalid superblock magic number [ 800.424638] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 800.458975] audit: type=1400 audit(1562090751.842:149): avc: denied { block_suspend } for pid=6425 comm="syz-executor.3" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 18:05:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 18:05:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x600, 0x0) [ 800.535983] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:52 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x20000000}) getsockopt$inet6_int(r0, 0x29, 0xdb, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x84000, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0x80000008, 0x4, 0x2, 0x1, 0x9, 0x4, 0xfa5}, {0xc000000f, 0x40, 0x6, 0x9, 0x6, 0x9, 0x9}, {0xc0000009, 0x8, 0x4, 0x40, 0x1fb4, 0x80000001, 0x8}, {0x80000009, 0xff03, 0x2, 0xf19c, 0x9, 0x100, 0x5}, {0x80000007, 0x8001, 0x1, 0x81, 0x1ff, 0x8, 0x4}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 18:05:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r0, &(0x7f0000000080), 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x208200) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x2, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x450}) shutdown(r0, 0x0) 18:05:52 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002d00817ee45ae087185082cf040f3d7f193eb211df6e47e2c4ca86375b3f00169148790700c9be80e230", 0x2e}], 0x1}, 0x0) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="054de1954037da60829346655c9fe78a7b330cfbdc790e309c2c3b05811d9f117a4c3b4ac33b13f3b4e92a35ee8dc7fb02468d6cbb8c5b296ef6f7c45d7c5269d3439b7d8889fc1cbfb4788bb973171c5301b54cdb8fcd23b0f007be8156ed7a9120e9abf827228e08c1a47f25c4357cf3725b91c52024ec6c12fdab0830dfa00387c6df993edbb6cec73a5b3028efe1aa2b212679e774eb6c0dbe1416fe48", 0x9f, 0xfffffffffffffff9) keyctl$update(0x2, r1, &(0x7f00000002c0)="0bd905639c4edcfb9b12af638f46555242bc03e7028360e22399a7c879a25051d574340d137ee1b48d6a246a43b328b384d88a0265cb6c3f3f559292a5199f1a9c5e376446cd42468f8a79136045b0c5b80961982cb8dc4de30e71a7f6de6d372c4af632b4d188e73ccba44e3b3278a954233e24a8eef93189684e8f45be0365d312d24e8e48c82ca43d8425ec33a3e947be206b0282e6ffeaea9c77b87cb40f4d6e317723b4b0e6876a53f2d32667e85d35e5ca4c1edc5a062b9481cfda9c5b8a48a25fc32a50791618f5b4883d", 0xce) 18:05:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 800.713457] tls_set_device_offload_rx: netdev lo with no TLS offload 18:05:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r4 = getgid() write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xffffffffffffffda, 0x3, {0x3, 0x2, 0xfff, 0x3, 0xf1b1, 0x100, {0x4, 0x1, 0xfffffffffffffff9, 0x3, 0x0, 0x3, 0x6164, 0x40, 0xfff, 0x6, 0x3, r3, r4, 0x9, 0x1000}}}, 0x90) r5 = accept4(r1, 0x0, 0x0, 0x0) finit_module(r5, &(0x7f0000000280)='/dev/vbi#\x00', 0x2) [ 800.766212] XFS (loop0): Invalid superblock magic number [ 800.785322] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:52 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1b0a}, 0x8) write(r1, &(0x7f0000000100), 0x1ede5) r2 = accept(r0, 0x0, 0x0) shutdown(r2, 0x2) fdatasync(r0) 18:05:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 18:05:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x700, 0x0) 18:05:52 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xf0, 0x0, 0x0, 0xffffffffffffffb2) 18:05:52 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000880)=0xdd08, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa8020}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="97e8ff004ae529fe3fb7533263d48a1a914bf6d03183c45d95ab3ea91c237d16ca3b1075a9b61b0854caefc3d3acb8330e53243463f4ee8d02c0d1011cf31566e14de3ad7d631790d71bfc1601b6a4eb0eb31346025957f9575e87165e1d8d9235d34d92a6b6d40d3d6785afdf7cdc251e8bcc4d56", @ANYRES16=r1, @ANYBLOB="000326bd7000fedbdf250c00000014000200080008000200000008000d00010000000800040008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x91) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000004c0)=r3) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000540)) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x9c39, 0xfffffffffffffffd, 0x3, 0x7, 0x0, 0x63, 0x884, 0x4, 0x1, 0x0, 0x1ff, 0x8, 0x400, 0x8, 0x1, 0x81, 0x2, 0xa0, 0x8ae2, 0x1, 0x7ff, 0x40000000000000, 0xfffffffffffff001, 0x40, 0x6, 0x80, 0x101, 0x10000000000, 0x7ff, 0x3, 0x6, 0x9, 0x5, 0x1, 0x8, 0x80000000, 0x0, 0xdee, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x240, 0xfffffffffffffffe, 0x6, 0x9, 0x3, 0xab, 0x1449}, r0, 0x0, r4, 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xb64) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 18:05:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 801.175206] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 18:05:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 18:05:52 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000880)=0xdd08, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xa8020}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="97e8ff004ae529fe3fb7533263d48a1a914bf6d03183c45d95ab3ea91c237d16ca3b1075a9b61b0854caefc3d3acb8330e53243463f4ee8d02c0d1011cf31566e14de3ad7d631790d71bfc1601b6a4eb0eb31346025957f9575e87165e1d8d9235d34d92a6b6d40d3d6785afdf7cdc251e8bcc4d56", @ANYRES16=r1, @ANYBLOB="000326bd7000fedbdf250c00000014000200080008000200000008000d00010000000800040008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x91) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x80) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000004c0)=r3) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000540)) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000400)) getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x70, 0x9c39, 0xfffffffffffffffd, 0x3, 0x7, 0x0, 0x63, 0x884, 0x4, 0x1, 0x0, 0x1ff, 0x8, 0x400, 0x8, 0x1, 0x81, 0x2, 0xa0, 0x8ae2, 0x1, 0x7ff, 0x40000000000000, 0xfffffffffffff001, 0x40, 0x6, 0x80, 0x101, 0x10000000000, 0x7ff, 0x3, 0x6, 0x9, 0x5, 0x1, 0x8, 0x80000000, 0x0, 0xdee, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x240, 0xfffffffffffffffe, 0x6, 0x9, 0x3, 0xab, 0x1449}, r0, 0x0, r4, 0x1) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xb64) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) 18:05:52 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xeffe, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xa403, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:52 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000002540)={0x53, 0xffffffffffffffff, 0x18, 0x0, @buffer={0x0, 0xa1, &(0x7f0000000480)=""/161}, &(0x7f0000002400)="66d4c8b90bba9a47ee529682f24801e45a0832c9932b3e06af71119687fbfdcc447d", 0x0, 0x10000000000008, 0x0, 0x2, 0x0}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x181000) [ 801.385071] XFS (loop0): Invalid superblock magic number 18:05:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) [ 801.532997] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 18:05:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x79, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7}, 0x7) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xa) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x8000fffffffe) 18:05:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80e, 0x0) 18:05:53 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x6) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) socket$packet(0x11, 0x3, 0x300) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xf0, 0x0, 0x0, 0xffffffffffffffb2) 18:05:53 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={0x0, &(0x7f0000000140)=""/4096, 0x106, 0x1000, 0x4}, 0x20) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000001340)=ANY=[@ANYBLOB="6491e8f2563010f79189b0ff4755a817d00d2f431a609dc353e17ecbbf58028c00bf655692410668afb0f6500c71956f807cefeaa0617bfc4615fc00000000000000000000009e9b9d52c63e8b7cabedd00efa487acf2831792c6312579401c1dd99dacea3c7c474a4563e525c15b71479e869f6ddf99f4ce9b81c27c4f50310540fd1007943d261f2f6052c9b5f24a4df79e9c9ba4073009afd6482d00674cd73029dc9d97b998826766a3fd0b427fd31ea13570c20109f3ca6db6fe2297eb8b938c2ecc55efcf6bbeb1951c565c8cf0a09b72b1fda6769"]) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000001280)={@un=@abs={0x1, 0x0, 0x4e24}, {&(0x7f0000001180)=""/224, 0xe0}, &(0x7f0000000040), 0x20}, 0xa0) 18:05:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 18:05:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) [ 802.033223] XFS (loop0): Invalid superblock magic number 18:05:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa}) r1 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fea000/0x14000)=nil, 0x14000}, &(0x7f00000001c0)=0x10) ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) removexattr(0x0, &(0x7f0000000340)=@known='system.posix_acl_access\x00') creat(0x0, 0xfe2b08bceb2fa9dd) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) openat(r1, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) 18:05:53 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x900, 0x0) 18:05:53 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) bind$netrom(r0, &(0x7f0000000140)={{0x3, @bcast, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x20) inotify_rm_watch(r1, r2) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000002c0)=0x9c, 0x4) unshare(0x10040a00) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x3, 0xfffffffffffffff7, 0x7, 0xc1195b9, 0x9}) ioctl$TIOCSCTTY(r3, 0x540e, 0xa) 18:05:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000]}) 18:05:53 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r1}) [ 802.419581] XFS (loop0): Invalid superblock magic number 18:05:54 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockname$tipc(r0, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10) r1 = getpid() ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) r2 = syz_open_procfs(r1, &(0x7f0000000040)='children\x00') sendfile(r2, r2, 0x0, 0x40) 18:05:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x101, 0x2002) fanotify_mark(r1, 0x45, 0x1000, r2, &(0x7f0000000100)='./file0\x00') recvmmsg(r0, 0x0, 0x0, 0x40010140, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x8}}) r3 = userfaultfd(0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xf) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:05:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:05:54 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400000, 0x0) getdents64(r0, &(0x7f0000000180)=""/78, 0x4e) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000000380)={0xc00, "8399bc5c77114ab6dbee045bb573dd510a08e72ec85319fa7a3bda4d734382cb", 0xb32c986b0bad7f9b, 0x658, 0x3, 0x40, 0x1, 0x6, 0xffffffffffffff1f, 0x400}) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3) ioctl$KVM_RUN(r5, 0xae80, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xed) 18:05:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000000)=0x8, 0x4) fstat(r0, &(0x7f0000000040)) 18:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa00, 0x0) 18:05:54 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000080)="ca84e28e801fe28fb2494b683e26c0cb7c2372ad162cb7c085ba72a18f6801114c465df7ebdcd273d4859a6b81d435a44c89c80768debbe2b84b", 0x3a) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x4, 0x1, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140)={0x80, 0x7, 0x2, 0x5, 0x0, 0x5, 0x0, 0x40, 0x200, 0x5, 0x3}, 0xb) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) prctl$PR_GET_DUMPABLE(0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:54 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffa3) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0x0, 0x87, 0x83, 0x98, 0x400000000000000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x4) fadvise64(r2, 0x0, 0x4, 0x5) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x80001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) setpgid(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/58) accept4$packet(r4, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) [ 803.294211] XFS (loop0): Invalid superblock magic number 18:05:54 executing program 2: r0 = socket$inet(0x10, 0x80007, 0xfffffffffffffffe) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="240000002a0007031dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) 18:05:54 executing program 2: socketpair(0xa, 0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000004180)="5eba98466ab6de1b715f2a6cace1795334af5b89111ffce15086006c24dde0d7e6e498cc42629fa8de51b766fb9c17b613ed3a96f6e6c5de34778c61a6377210801cdb850e6d3477091f94b0b6f7f4b5068a427b0f5f19a201d6e10eb5c5cb370e8bd3d48095a4784d2dd427982024eb926f4ce6c34bd5940a54e95629e3f7affc69c23c778137aeb6a3585522bf31bcc7d0aa0421fffad9d635da63", 0x9c}, {0x0}], 0x2}, 0x40) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0xfffffffffffffd7f) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x18) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x800}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x2}, 0x195) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) 18:05:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc00, 0x0) 18:05:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x800000000, 0x1, 0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 803.610749] Unknown ioctl -1073172987 [ 803.783737] XFS (loop0): Invalid superblock magic number 18:05:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x101, 0x2002) fanotify_mark(r1, 0x45, 0x1000, r2, &(0x7f0000000100)='./file0\x00') recvmmsg(r0, 0x0, 0x0, 0x40010140, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x4e20, @rand_addr=0x8}}) r3 = userfaultfd(0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0xf) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) 18:05:55 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)=0x0) sendmsg$nl_generic(r3, &(0x7f0000002740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x81000001}, 0xc, &(0x7f0000002700)={&(0x7f0000000480)={0x2280, 0x23, 0x24, 0x70bd25, 0x25dfdbfc, {0x1d}, [@generic="c04654e16b39cd71139d92cccced4049407510d63864a748e9078df73fa26ef8d7c6057d5f08b6d99cc4b9af4759f634544b10564c6e4c86843d80ff3b982616ad9bdb5a3b34f6ea94c9c3ade1041ed68d6caa78271513534006254adb42e6757bd31a7bbb5ace8277d7868777ea7ff5ae96919b613abc3726503bf66d34f4bac3e95759ecae49488e8f9cdf79ea1ad8378f3658cfe87f2df12a2d2c3c527bdf70c016adb675ec71c1c1929e2fc773d0f011b3cfed38fc93e84c2eb98beb080055b49b3a99dcdb2d8759866462", @nested={0x184, 0x1d, [@generic="2eddb769f9519a75a40c758f9ef4f3ca3d60bfa63e69b23f32bb1679c67c7554f36436ed9db8ddb60e78b909d180b71433745036135d1cee294e24c84110a9774da5bdb4b5abe09b050d962b00c3a566d0a4356eade42d965bfc0fcc498601e8e53c4803b56d469e01ec4551ca01fa618f8b0722c7ee6ac696559615816a2d16948959db6fe8a3bb6ee2d37bd4eb53ea68e2878258aa99784a2ce6037c0f7f5330cdd586269701f7d14f1946945a8a9484e989bbd19427c890f1fbb3574ac15d91ab3bdee2f306ca984837", @generic="aa424924495555b84d4b59a5df09443e33ab66f9810cfd38f25897ada37e1b32d7147ac6513b5acc661e5f2ffbdafb99f7fd1502aa7de9eda08a2fb5eddc43c46f8d2bd9121520a4c7c8928b0b869ce1271c90ba5f58dcb6b07c0c2bd82dad3296e35e98db422cf86e45b139cc8b01e4bbc2e47009eca5983731092fda16b13fb3810b183e94b6070c0afb9bbca115307fa9ffd0bcf905e277926ccd90ec172eec78745b48d230e67b4f120b8c83ecfadbf5a458"]}, @typed={0x1004, 0x64, @binary="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"}, @generic="a887bce195451f2140fcbb3d3f98810aa040bb4b223580a256804781504b6bbda4b91b36b2f97f15939fc5997726c1ac83c5fbf24789e0dc61258fb6897c28165e54e19f175407d83e2b9591a4e1de874d553b5856e1e3bd91abb0bd1a5df27329628bf445f4d05b65c7e22e32fa3ca5da09cbb4378bc806324138f2a9f3e49f9e7278b5d5e8ad29adb2d6d99263d74cbaa1c23078cc40135ef784e232e70819fb43d48bd5538d531e8b627ed1982131129fcdbe4e4c3a8f7368007edec27d1f5098a007773d4979a3eb9d01cecc8a29ed771be03fa2661682be7814d2e2bda66fc69c1caee85a3396027e6316d5122c8e6996b1744d429fb0c85d78dd96b7d53552a994e7f82234e84e164dbccf82ad54bf6c65a6022bc3f82207ea8e5365f40112f25983aae0557c9b48aace868563be20fc0a155db7f281d0734315ed1d8ca5c0fc5f510aba845848c722a7c24b1e2a83fd7f6fe4ed377a6b3264bd50a432afbff1f631ce18bd263876c448fa7fa106af452411a9022ec8c8cba3eea19bb2f28235f23e353e885ac2b17df14b9d02202f0cb63792d1d8816cba0a0efc1969af80d8905f1e071d29129841e932bd613ddd7c2fcf9cc5c30eac7b1230c5015fdd2a47c4173f72a2092a9130d9020c7e31ee9c2929a50fdfc84f177ddb641abe059211bbe401749d7d3711e2362e66a509a258a1f6f212c944ee4dd74d05152b6c4e153b0748eb741d829648d0d8e3ecf829ff270e4131119dee072cb200e9711b41ed0aa7805483394285833c90ab46f1da37a6b3250623070ba819be75d2297f44c0b86cf94708b44a29487f458bc8a9620969a78ac5b9d2f1f453112174f4a6e66593c58f052d3436a971fd3f5a45736a0a132cb2706e3d6dbac610b4b7245b22e5f81d91be96cd8d6143c9b04d1e78ee747c7c1e129faeea793af91a61fc5701cf230b3e6b0f0416fe5fecec8366beebd92f7142dc98c8dacfb29fdca6e6c3c9d2c2249ff82b8af0dbae0d6c6bdb68a8df7e50df45a4e4411d3a24bea1abf1aaa37111d7cfbc919e29a9e0b2b1d55fc8c28a872414d394011a44c93f4761e8de2d2ef484463154a66d1e6f6f3628ca390d638742d75edd1e00750a4ef733849930776458bbd4fc3bf0d5f83d29d7e837222cad0e96d741b2565865fa361b0d8ef7e68f0d599c25866fbeeed1a1619315f53506ae99f8d012c206de371bc01a52f7f061cabfad08e83fb12393cfc8b3124c0b96f052fe4f3b2038c563335b5765c48dbe0c07ed0a8517894c96177645582dfb56d584406640d17630e73cf3df754dc58736a36ae8750d20fc45398c8054813e08f876e57b367bbbaf901f3325b0e20bfd89ff02d13f9f18ac1e7dac9609ede46b26cdc0f35694c94fa81f5d5e9e9a1db48e68a06795bf0f86c2c0c1dbfd61db04e3af51294ca937a6f91b6056385821a88e413ee52c43037787a0843f640dfdcaba4855ddd0b99de470ce135212fe24a3fae5e0896f4fda7717cc292121c35a1d7337832314b8cb3a12fb2f69f9f2062e21ab140e53948d86cb9f40bd652fedd9a1d69d8b725dbcc303fc0db0a851fd7df223b67a675a93dec12413ea1a79053292db5c9c0f14f2b10c05eb0aa01cf48cea748c40d5be5dc871a925358f0c77b3c4300ff8b29ed6fe1fbf96ba051199f49ede398a8f8950bbbbafe556e8def5504cf0755cddc91e427139df73e5e746cd0d26aa1b25a879fa0ad5929d30c30ebd6ef83d708b05afcc6442d8cf7b010a7529bc9b4d55995e799dc7974cd31a173cc62e168ae0d0b829e8be18c2aa206c1a6ff3b46727ab95242a60da4c2f68c96485260a18b5dfe2df1d6e644d1227319cc2e6d346b97ec6094f4c37bb31914e03e89ec922a6a9739818c3bdd4c592d531ec30c8224dbe987eebe85bf72c837a2a42f4401628985ecccd2d881eeb9323721fd22a44f891cc2cf92bc747bd0cd83f555000d47bdc65e2d6f4a9ad1b91dd5ded66d8988de50d2fdbe4ed222ccdc90322c2b63e972e2457ff8cb6b42c759b840c60559567718da8a08153acaf3a17478e96af4b4d966788d67cc9374dd93fbf0ffaf85e9b8eecb21139ecf1c0f17d37200b76e63c5e6ddc2e652df861bd821ac55b02c388155146e4da8730fc7758e0f96a23dc1ecbc945b691a60c9999a24ddf31168b9701cdfd62753e6d43e8296591556eeae3e35b26435d858a2e3b66536487f749b7cd8b005cca046d3bf692586a83da29da82ce6f28adaad5564f45dd6c89065fe1b5303559da9eba35a097b8e03d5a14cc8464929a4c3e944f4e2c086b80da6d592c0fe56d526ded2ce85edebb74b0fafe95753cfb0d7eda45e1afd32536da6f2455547daeff16ca7175af5195718aec50581f1f2b0a4ee71532fbebaf37d009d324b4eff63f4a1ce31a4e3c5aaaebc8f2243491a4ad31fbfdacb80a6a441116a6e17529adea66e4b0530bd19b6c9707738e40f9b7fc438d0eb47d68abac4c4ba59927de86549bbc04d970464bd454b5625e1371067b948d41956cf6be32f4b3656f8785f59be88fea8feaee3e548df355b5433e3741e824558ab6368b3c7194935cdd66fcd5fbb54e3cf9d44ba1f8834e679af0433599806f466bbc1506d12fc239fc6c36c0f97ef06d8b0b0b8213e62f9ade18f4729d49dba1bb07ab94a581c061a88ef274986dfd19b3b12f76988f4c3b0b2d53d19f7f145e8521c48eba6979c49fc58832c9b06b93e59871ee59801997ee6d406cd3db5d46a69b815d94d7abe9d70a0787027a6b8f5c3ee0ef4df9a132f1821c7e5e35af078d6d0f85efe45abe512ebd6cf4ee07d6ec0e5a6a198cf30cc34b1e569881768eb1f937730424ec80bd1bdea51f705bd7b7a02b61ebe379c9f0266b3d08c831a05d7da7a16abc26ef06b3f2592744c859dcfa8c6d7e424acdf85d02bed235682a4ffae836b32982426855782433a815d3c2d6420122adf300390ccc29cd5d73d057be304e658098a0ad7ecaca6695f7c726642639e2f0fa8b7eb3fddccc931892bb6b3c220eabe8fd98418e33dfe13204064c5c1a7f89651c87ebec77ffc6a9636d173927bf505cd83b68f7583edb76a6b6f0a49eb795ec4733c87233081f00b1715121784d3a364acd4747df27087cf4fe87d9db72605b107b7256461c52c89897c8beba5ca626b0185ed48a6b8b1e0de548e2bf80ed79d0fa4c3b3b463acfb7a9114435da3ee24889724b342109f725df466ac260557c0ca0e9262c8c34a256c366d7fc6bbf082eb9e766b559ebe37fddb72893695ce15a81ab61235425f18063463f9d842423bff6a54868a2838973fbea667f3e26b8c23c1f52bcb1415d933c6e838f4dc8471adfbf6067e5d236e416a2938503c7deac11b3fa5e58a82a63bee4971bed48608211734ee56bb7220281fac0ca1563612b3bcf827657356be83b9289ceae12e5428284c1e72d4d03a238b9b931aa0eb7f6c87e9e91d8ae21e163ccf675cd79cee9b36a886cb2f98d8cbd7cd4355e7dd51563c2b9e42803aa38fbaa1c7f5d33c2049f6de7eeb4196c7c4ac73e5749a8e131de6b2f74097fe9a32ea9d69d29f9b21995837f04ecb2cdb4501b009db6f4d6d1b5cade1e107e4f9ec160a4fe990b3e5416a87129a6f8c4ff95a35524f50cf1f9b0d665c5eb09f370edec3d1877c41a33893e1856115cfcdd8fbeb1592a7730e60a15fce0ea18113a6c335d6ba42ba776de1ac4722c0d19143367cf6e72c69138404bfd693017739362bd43fd4229b7e560040c22a22002075e4b52155e371558df1332211bd3e171fc6a3173f498a6c981b4f3b61f6d082ebf7e93ab7ca2131f4f4ead8e44a11d5b6168081eb143ae647592490427cf7647468905d966c8054d9cb14655ffca8c49f7f99ee2e0467a6d56f1f599c55a07b18458c49c08c24f4aef8be5e6b55d7cd99383eefda7a5811d9ad5c36e4f7f26a094d3478d331540e6e107b68824ec633e0571934dd8ec3ea318fca905278c724e259a3c175ff41cbac66dee8d7b6f905cc7545db2ca1cbd09588460d1500917d8b9d0acbd05f194157fc5795f90e114a6efd4f38b970dbfb95856491deae23ef080d7f5bec02037475f054651a6cf64dc7a0a633b2e7af54b1fa70056541397504b8a51ad5924843891c228614793a1664d9de9d63981f70cfe287cd5a5a447dd5b63ea709aac5ae2e8d470a5f77c00459c420de074c3bcf3deafb693617a8534fdf4ee0be590f0c0186ff1a2ad5233342cdda5f322c64a16c1ea96b20c22cc0d44b7c4b4464172b63dd9684dce314343430d2773afee05d2ceb1721333b8ffb4924db5990c5f9c499c38679c1c7061896c8b49150701fef45069736882b27820bbd9a7f2cbad02a166d2e1d208d2c46ef8411a9a4a21f9bb28ad5ca2a7e7ebda2306aba75aac4d9b7587f96a5139ad46818f6dd5b6b80a2998ffc965115e9564c1ef71a97f6dde75843775599b3a80ff5125d68ec9ff754eefd02eed496bcef980d02f59481f74a521856cec604884843d88a2c87274570e76a9193abd44713024fff7134d6a680221fb0867eeb6deb410b9ce8e9b412239fcad469cb2109134ac6bb180a706fbfc3edb19e7aad40ee7f241f231359d7651c5249294c2af5991807ef3042b381f2a29f30cb286ee93c978752bb84cec0af46a308f87bbd75f02c2d6b9a315c20d54217b3fb7b45113601d9a6b67ddbac312dce63d8e6b92b8a8137264afde0c4f9ba597bf73330efc6f1a5abc8739451b59925b6ca72d108349c7bcde235c9a6be9460d9411ff23c07f5e1203534ddccae87139f548ea78da4219c91da0ebf79eeb314f87ee52759d9bd5553d4a96be11f7722e3d9ce60e88a59a8e3c3583e5b93cbbdd5ea95cdac7964ddd83fa750529cc2a8157bcf677203e54e945a8ba0689d7d3f008a91bd1ea6104188a8e210d24c1586b18f3492ca75f8c06778eafd388813e42feed6c16ed0c3f0fa7dffb9c511ba43f326dfb41245a7243ef4b55bad50713ed85da276416a62f69542d8522451d52a6c9b156cecbef2c62e5c565a7cef3c8dad68704bb1cfb45cfb72e67d1b6ec04d70fa131398611550ca651f8cd7bdc82cd88eae09fc7e485b9658775282210863c4acb95001c4027df0f02c9acfb5832faa93bd87154c657ef2f8d11626c399ab921c8caffd853cc14ac10b3ea256620d9d512b84b0247cd62df24a2eaebef55a5b809a0ca9658757c4809f8995f77ca5300456fab7d81e7b42887577da1e1ea1880059048b4ea9cf985dea6c3a19e5423eca8f6a4bda2cec2bffc60c43021d69d561a08b136ac5176c20afcff82a8f8cdc5b42dc92cf9846295418d242178526d3048583a106ddd6e69efff6f4272a0102c92b680c661e2150c61c0acc84bb02c27431e99953aa5277da297ee2467195b0db8683582dca9faf0810687e1cba10e77899796f0c867f64f5f3463cef5c81dbfba7540217853473ddcee6e1e400014614b9a3930476379bd90bf95534c0492eed0b929c994b552985befd4a06689c28264123873169d119245501fb68db5d970d519de60f6ee387b89ca76fc014d5e6740a570f315b93212bd30f18590861419eb189d3ab1b33204814e14f2f1d236fb2e56f2f4453ec5d88421c266e8ef7e2a802951c813fda04cd2ba70ab13d74a6cd620d1e6d66ceb63aaf3ffb061715e8ba890a54c0b018ec159c80df6f4d6366aabc3b56fc687c19819274661dd56b0168c221fd05d4b6068def5283c6df4f7cd220ad6be1b4b28bdc66849839c3bb9d64215", @typed={0x8, 0x91, @pid=r4}, @generic="9ffbe3a085a22fd80ed64afc867e"]}, 0x2280}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x676}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x4}, &(0x7f0000000380)=0x8) ioctl$KVM_NMI(r5, 0xae9a) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000002780)={0x5, {{0xa, 0x4e23, 0xfffffffffffffff7, @ipv4={[], [], @remote}, 0x7}}, {{0xa, 0x4e22, 0x3, @ipv4={[], [], @loopback}, 0x1}}}, 0x108) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:05:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) io_setup(0x4, &(0x7f00000001c0)=0x0) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x800, 0x2000) r4 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x2, 0x2) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fcntl$dupfd(r5, 0x0, r4) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001640)='/dev/ubi_ctrl\x00', 0x40000, 0x0) io_submit(r2, 0x6, &(0x7f00000017c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x5, r1, &(0x7f0000000200)="d2e6bef52b11b6489832b5cf236b92d505efcf7ee3cc35f33d1e87ae251e8c399f2a928de789f2a65bb6d0f18f602f2b1ba5bbcef27c0b85bdcdada16d1a1aa8b63616a1ac62757a82c0ed70cda3f4f8aa19495c632bde472728e39e207297d9dd0782032856a9ad81c1033713ff65919a20a5ba13beb13d55fe3f85702134147724eece", 0x84, 0x1000000000000000, 0x0, 0x2, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb, 0x9, r1, &(0x7f0000000340)="fda78330e7596a78f43dc3bb5482ffe29b754ad05f4d57a34e098370190811c99b23e2b69a2d345dc9e4b37e6b4993e0f2150eb2f0e8a037e6d660bb72689f540b1d90e79d68981787db4e67ddfcdf67591b3b0cb31573e7901e00458ce35bf34ca9665e7ebed9bb139aad44ef68b7476238a6877c4d86a98f0932b71d055ab99ef5474f52218657687b4f412cc3b0efd884776403f336f23b8fa56434a6b8b27bea4371bb425382be4cc6c3406a45e9b42f6869f19230aa11e5e60176f27b01031b8f052587fc17a51a5e247373ed05a2637f098cf2", 0xd6, 0x6, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x1a5400000000, r1, &(0x7f0000000480)="b9eb8299d835a6", 0x7, 0x5df4, 0x0, 0x1, r4}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x100000000, r0, &(0x7f0000000540)="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", 0x1000, 0xfffffffffffffbff, 0x0, 0x0, r5}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0xf, 0x3f, r1, &(0x7f00000015c0)="b841bb52a12e714ff171b5b52106acf3580df8007e08cd47d10d87498cfb6dc466166a0d1202c23e23e60bfde1878568437a9c52157a778a5abb2198cca6e04c77f94dc749db900eb8ff74db1f8f", 0x4e, 0x100000000, 0x0, 0x2, r6}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xd6c2, r0, &(0x7f00000016c0)="58b99db8c080fa7e00626799d2aa3ed2b31d18f8ddaace2d14ac759555b2d5fa4e93a1fd7466956f36e07bc67ad1d40aeb79ee3ed2b3cefc4ead2f6b7a1707d38cf4c840b416579a66a2040798681f0d1f5311513a177e40207058a721c92580de104edc4b3153e81b84237125d96e21da436aac8e0f0fa224e4deb961d440d5c8e6298f100c9dcee704b1d6f7d4a61209126013fb42c096cd6473ae97030867acb5cba56c9fa80d84592ba68e61aed37ed02ca38a445037bd81cb1e9a3e", 0xbe, 0x8, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x400, 0x0) r7 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x101, 0x400000) ioctl$VIDIOC_STREAMOFF(r7, 0x40045613, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000001800)={0x2, 0x3, 0x6, 0x3, 0x80000001}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x800000000, 0x1, 0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xd00, 0x0) 18:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x800000000, 0x1, 0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 804.174647] XFS (loop0): Invalid superblock magic number [ 804.273587] Unknown ioctl -1073172987 18:05:55 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffa3) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0x0, 0x87, 0x83, 0x98, 0x400000000000000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x4) fadvise64(r2, 0x0, 0x4, 0x5) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x80001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) setpgid(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/58) accept4$packet(r4, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) 18:05:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x800000000, 0x1, 0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0312c055e0bcf9324d9bf") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x22000, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000180)={0x9, 0xbc, 0xfffffffffffffa10, 0xbaa, 0x3ff, 0x24, 0xd, "e1885a9705ce32b8d0bd7ac4eae7963e52253381", "f98c13f275b72ed7f8168ae71e222bf14b061f78"}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2001, 0x100000006, 0x0, 0x80}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x1, 0x3, 0x3, 0x2, 0x3}}) dup2(r0, r0) 18:05:55 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r4 = dup2(r1, r1) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe00, 0x0) 18:05:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3ff, 0x10000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x1, r3}) 18:05:56 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x10, 0x7, 0x7, 0x6, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_ident={0x2, 0x0, 0x8, 0x0, 0x4}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e22}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e21}]}, 0x30}}, 0x8010) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b05", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000600)) dup3(r2, r1, 0x0) sendmmsg$inet(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=[@ip_tos_int={{0x14, 0x117}}], 0x18}}], 0x2, 0x0) 18:05:56 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0xffffffffffffffa3) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x6, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r2, 0x5427) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) write$capi20(r1, &(0x7f0000000080)={0x10, 0x0, 0x87, 0x83, 0x98, 0x400000000000000}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0x4) fadvise64(r2, 0x0, 0x4, 0x5) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x80001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) setpgid(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/58) accept4$packet(r4, &(0x7f0000000040), &(0x7f0000000080)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001200)={{{@in6=@loopback, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) [ 804.626783] XFS (loop0): Invalid superblock magic number [ 804.654727] Unknown ioctl -1073172987 18:05:56 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7fffffff, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000140)={0xfffffffffffffe00, 0x0, 0x1, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000180)={r5, 0x7}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f00000001c0)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 804.728625] audit: type=1400 audit(1562090756.112:150): avc: denied { associate } for pid=8145 comm="syz-executor.2" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 18:05:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe08, 0x0) [ 804.809082] Unknown ioctl -1073172987 18:05:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000280)=@ccm_128={{}, "6cd1b9cfedabcf79", "15acf697155736d8d1f007b260c5e0e1", "7d4470cb", "8fd68d8b69413671"}, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x0) bind$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x924, {0x3f, 0x80, 0x40, 0xdc7, 0x1ff, 0x3}, 0x8, 0x8}, 0xe) getpeername$netrom(r2, &(0x7f00000002c0)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @null, @netrom, @null, @null]}, &(0x7f0000000340)=0x48) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:05:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x100000000406, r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x100000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x7, 0x5, 0x0, 0x9, 0x8001, 0x2, 0xff, {r4, @in6={{0xa, 0x4e22, 0x3, @remote, 0x963a}}, 0x7f, 0x10000, 0x7fff, 0x1000, 0x9}}, &(0x7f0000000380)=0xb0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") recvmsg(r2, &(0x7f0000001700)={&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/104, 0x68}, {&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x5, &(0x7f0000001600)=""/232, 0xe8}, 0x2103) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x1000}) getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000100)={@empty, @empty}, &(0x7f0000000180)=0x8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000001740)={0x7f74, 0x3, 0x46}) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x11, 0x6, 0x8}) [ 805.007055] XFS (loop0): Invalid superblock magic number 18:05:56 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xfffffffffffffff9, 0x100) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000190008f800000000d93400001d0100000000000000000000000000004294df52fe741f7802000021b78d846a4162d870"], 0x34}}, 0x0) getsockname$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @remote, @default, @remote, @rose, @bcast, @bcast, @null]}, &(0x7f0000000080)=0x48) 18:05:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ip6erspan0\x00', 0x43732e5398416f1a}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r3}], 0x2, 0x9a) r5 = dup2(r2, r3) dup3(r4, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r6, 0xfffffffffffffff7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}, @ib={0x1b, 0xfffffffffffffff8, 0x2, {"1a01389e4c609a569ae6c442b1024d7a"}, 0x3f, 0x63, 0x8}}}, 0x118) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") 18:05:56 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) getrandom(&(0x7f0000000500)=""/11, 0xb, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf00, 0x0) 18:05:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0xbd, 0x279d}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0) 18:05:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 805.401969] XFS (loop0): Invalid superblock magic number 18:05:56 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="a762fe3202000000000000000400000000e4000010000050000000002000000000000000"], 0x24, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x0, 0xd, 0x1c, "56e8c637fafdb7c7326b393ad80b35f310e930f827dc074dc6d6e48d8cada0ebfc95396293546de8a86ff5be50c751e545d926aaf5c96d6ce6bd45dd", 0x8, "b6904ecc93654adb68dd5908c70149da3986c8646c65396eb73595b320ca6ecd2bf8d85f43c296ba9ab549747c62abdc000900dd286e17a8875ab420", 0x8}) 18:05:56 executing program 4: openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x3) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:05:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1001, 0x0) 18:05:57 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x9, &(0x7f0000000040)="11dca5055e0bcfec7be070") pipe2$9p(&(0x7f0000000100), 0x4800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:57 executing program 2: timer_create(0x200000003, 0x0, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") exit(0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @local}, {0x306, @local}, 0x4e, {0x2, 0x4e21, @rand_addr=0x2}, 'sit0\x00'}) timer_delete(0x0) 18:05:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x400002000000084) getsockopt$inet_buf(r0, 0x0, 0x26, 0x0, &(0x7f0000000040)=0xc) 18:05:57 executing program 4: capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000000)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000100)=""/190) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20000, 0x0) 18:05:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x76, "3526b4e77b33032244ae33ca928ee4a4ce771dee9b40e990693543a3ec97552845add085e84eb0413058e3fb8f84efd25dee4fb80b7c6f83ef99e32a7c42464abe6f4ad6bc1ed56b3c95af520767adc97909f15af278861e7a33e660ccbab0c6f892c3b0d68a76c38bc1a70f0afd085bc913be4fc369"}, &(0x7f00000001c0)=0x7e) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x1}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4000, 0xc9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="caed700013", 0x5, r0}, 0x68) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) msgget$private(0x0, 0x0) 18:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0) 18:05:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1c37, 0x30900) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0xd6, "8adac8c078da3dd1dca32402b55ed48174189a4f8003369560e0a8a9b0c75d752500612428244a89a42a51f0e495e18090ad6306bbd2ad37d9105d5bc308dbbc1df35edb9ba45a9c083a669074a74bb4b71a77308d971c5d9389efc3103246f6c14ea81930e9f80ee8d9a584b9be063a9c7e109c31c1b544b3fea52f51718d43e9d17b7da6a2e44e67f50209a3b8cb50283d4360cc5ebb7b1724c95928a7c4dfc61b19e221063879f91426624f456850d41ff43ee4fa7800b599d0d49df2217c70a91f2e15003b62d7f007964890aedd789bd313cb2c"}, &(0x7f0000000240)=0xde) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x100000000, 0x30}, &(0x7f00000002c0)=0xc) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:57 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000380)={r1, r1, 0x200, 0x7a, &(0x7f0000000100)="76b9e1252a54ed02961538d1e54b0941f7196f751b201580c9acd8b1f48dcbe7cde41957f84305d2cc4c86751c533469b1fcb018ca2056dff99deb070ca3a2f87f4daa9edbfdb7c195ad9ee57741b5181e3bf9dcb8c43a64834157b6dad16f04bf952839dfb543aa318fd790da0a918a5d26545d0ca3cb0b73ee", 0x73, 0x3, 0xffffffff, 0x0, 0x8, 0x2, 0x2, 'syz0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000400)) 18:05:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca07200000000000000") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0x200, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140), &(0x7f00000001c0)) read$alg(r2, &(0x7f0000000000)=""/49, 0x31) 18:05:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000, 0x0) 18:05:57 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'yam0\x00\x01\x17\x8b\x00', 0x4012}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ptrace$setregset(0x4209, r1, 0x20000004, 0x0) 18:05:57 executing program 4: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00003ce000/0x1000)=nil, 0x1000}, 0x40000002}) 18:05:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup3(r0, r0, 0x80000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc055e0b08007fe470") r2 = msgget(0x0, 0x480) msgrcv(r2, 0x0, 0xffffffffffffffc0, 0xfffffffffffffffd, 0x1) 18:05:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x2}}) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x189000) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000140)=r1) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:57 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x50000, 0x10) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2003, 0x0) 18:05:58 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x1, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x9, 0x4000) pread64(r1, &(0x7f00000000c0)=""/85, 0x55, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='dummy0\x00', 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000001e, 0x0) 18:05:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = dup(r0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000080)={0x57, &(0x7f0000000140)="aa39c8421b4061a8311b40c1d2eeb6209c64ace32b79dab38daa8575b088980545103486881dde12f1a4e4a15bb95d81e64d64b4e3c1c4f44f42775705101efe1571a6f50ad6e764de6eccb4ec3f6d021fba2640c2bf24"}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:58 executing program 4: arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x6, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 18:05:58 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000380)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2200, 0x0) 18:05:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000300)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x301000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x9, 0x3, 0x7, 0x8, 'syz0\x00', 0x8da}, 0x3, 0x104, 0x4, r3, 0x1, 0x3c3, 'syz1\x00', &(0x7f0000000180)=['/dev/snd/timer\x00'], 0xf, [], [0x7ff, 0x967, 0x2, 0x6]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:58 executing program 2: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000080), 0x4) 18:05:58 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x2000000000006, 0x1, 0x5ce9, 0x0, 0x9917, 0xffff, 0x6}, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x40) r1 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) lookup_dcookie(0x1, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r2, 0x0, 0xb, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) finit_module(r1, 0x0, 0x200000000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x4, 0x80000000, 0x9}) unshare(0x40000000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x80}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x100, 0x4) [ 806.959187] audit: type=1400 audit(1562090758.342:151): avc: denied { create } for pid=9553 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 18:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2300, 0x0) 18:05:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20c800, 0x0) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x10000, 0x1, 0x8, 0x4}, 0x6) 18:05:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000140)=@ethtool_coalesce={0xf, 0x3ff, 0xde, 0x2e, 0x2, 0x3, 0x80000000, 0x1ff, 0xfffffffffffffffa, 0x800, 0xffffffffffffff7f, 0x7fff, 0x9, 0x9, 0x852, 0x1e0c, 0x0, 0x7, 0x8, 0x0, 0xffff, 0x3, 0xff}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:58 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@objname={'system_u:object_r:hald_acl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x51) syncfs(r0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, {0x2, 0xfffffffffffffffc, 0x100000001, 0x20077f1}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x6) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x4, &(0x7f00000002c0)=0x4) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x7f, {0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfff, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) 18:05:58 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x1000000000000002) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1000, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@timeout={'timeout'}}, {@timeout={'timeout', 0x3d, 0xfffffffffffffffd}}, {@sq={'sq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x80}}, {@sq={'sq'}}, {@common=@mmap='mmap'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@pcr={'pcr', 0x3d, 0x2e}}, {@euid_gt={'euid>', r2}}]}}) ioctl$TUNSETPERSIST(r0, 0x80045510, 0x716000) 18:05:58 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2c00, 0x0) [ 807.302676] IPVS: ftp: loaded support on port[0] = 21 18:05:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000300)={r3, 0x4, 0x0, 0x3, 0x440, 0xfffffffffffffffa, 0x9}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:05:58 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@objname={'system_u:object_r:hald_acl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x51) syncfs(r0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, {0x2, 0xfffffffffffffffc, 0x100000001, 0x20077f1}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x6) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x4, &(0x7f00000002c0)=0x4) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x7f, {0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfff, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) 18:05:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='pkcs7_test\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000500)='pkcs7est\x00\xa0\x9ag\xb1\x80~\xd3\x9e\xb5\xa1#\xee\xe9\x8a\xc8\xa9\x17\xaeP\x1a\xe4\x8f\\\xf4\xee\x1fm\xd0\xbb\x04\x88l\x14m1A+\xc0\xc4\xae\xa20t\xa1\x9bUE\xd7\xcfC\xad\xef\r\xb7\x80\xee\af-\xd9\f\x00\x00\x00\x00\xd7\x82Q!J\xe6\xcf1\xc2\x1adK1\x15\xa2\xe9#_\x82\x99\xe6\x02g\xa0\x05\x0f\xb1\x12\x05\xff\x827\xa0\x98x\x04\'(\xee\x03I\xe4\xba\xcag\x92\xbf\x86\'\x97Quk\x04\x98J^\x97\xd5\x94\x9c\x1e\xc0nWw\xb9\x81N2\xd2\xc8\x9f\xb8I\x9f\xcf\x9b\x9e\xde}\x16Xd5i\xd7VZW\xeaTM\xa3\x9d\xa2\x8d\x14\x7f\x89\xb5j2\x9f\xd8\x80\xa9\xcc\xc0\x9d\x9e8T\x97\xf7jl\xfb\v\x8f\xa1\x80C\xe1\xa3k]\x03\xb9O\xedUp%\"\xb4\x87\xb6\x10*\x92\x87\x11\x06\x9e\xc2\xaf7co!\xba&}B\x1bB\xb62f\x91\x94\x81\xc2}\x82\xae\xbaqq\x12\x1c\xcc\x9aa\v\x19=\x16\x06\x00\x00\x00\xceAi\x97~\x9f\xb6\x7f\"7\xc0wa&7\x8f^\xb5\xa6^\n\xc9\xc9\x9a\x1e\b?\x17\xe3\xfd\xc1\x85\x15\xfc\x1b!I\xcc\x8bq\x8d8\x82\xd8\xc6\x1a_\xc2A\xfeHa\xac\x15\xedP\x98\x11M\x8aUc\xc0Q%H\xca\x86\xb3\xab:\xa1k\xd2\xaf\xdb\xe79\xaf\bc\xaa\xea\xeb6\xfdK\x97\xd8<@\x16\xc66+U\x93\xd0.\xb6g\x8f\xdc\x94\xfa\x9e`\x18+\x8e=O\xea\xab\bg\xf0\x02\x19\x06\x98Dn\xfe$z\x93\xb6\x9ac\xf8?\xe3\a\xa3;y]\x7fk\xe7\x1e1S\xca\xf7\x03y\v1\xf8\xdak\xc6\nF\x9f\x87\x8eC\xd5\x97\x16\xfbfhi\xd44u\xa3\xd8\xf0\xac\xack\x84;\x8a\xe2\xe8p\xcf2\x862A\xa7gEg>#1\x1b\x1bRR\x1a?#\x8c\x95H\b_\xebxt\xf0\xee\x14\x1d)\x85\'FN0W\a3\xbe[P\x7f\xe1\xf1K\x8e\xb8\x89\x8e\xd4_\xb3\x1c\x92\x03J\x16\xb1 \xeb\x9c\xa5\x03\x0e\xf8=j\xe93\xbc\xd4\xaf\xcd3\x83@$\xcf\x0fT\x1d\xe3M+\x04&\x8bJ\x8apF\xa8\xf3\x0f\xba\x81\xa3bxs[t\xcb\x1ap\x8d\xeb\x00\xc3\xce\t(\x02v\xf3I7\xb4\x11|\x8c\xc6\x0f\xfbU\x85\xfa.\xa4\xca\x06\xa6\x7f\x0f%3V\xff\xa4.\x8c\xc2\x99\x00\xef\xb8\xf6\xab\xcc\xf1\xe8\x16\x06\x85\xab=\xcb\xa2\xb1\x1eN\x1f\x92\xbc\x16[)\xee\x89\"\xc7\x85j\'\xe3*=/\xe6\x95\xf8\x02\xccy\x9b)\x06g-\xd4``\xe6\v\xec.\xe2f\xd0\xf6\x86', 0x0, 0x0, 0x0, r0) 18:05:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3f00, 0x0) 18:05:59 executing program 4: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x0, 0x2000000000006, 0x1, 0x5ce9, 0x0, 0x9917, 0xffff, 0x6}, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x40) r1 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)}, 0x10) lookup_dcookie(0x1, 0x0, 0x0) r2 = semget$private(0x0, 0x0, 0x2) semctl$GETPID(r2, 0x0, 0xb, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3e) finit_module(r1, 0x0, 0x200000000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x4, 0x80000000, 0x9}) unshare(0x40000000) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000001c0)={0x80}) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x100, 0x4) 18:05:59 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) write$selinux_create(r1, &(0x7f00000001c0)=@objname={'system_u:object_r:hald_acl_exec_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x4, 0x20, './file0\x00'}, 0x51) syncfs(r0) write(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, {0x2, 0xfffffffffffffffc, 0x100000001, 0x20077f1}}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)=0x6) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140)=0x4, &(0x7f00000002c0)=0x4) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x7f, {0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfff, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) 18:05:59 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)=""/225) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1fffffffffffffff, 0x5ffc, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x7a7, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000003c0)={0x0, 0x3, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:05:59 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x81}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x100}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x8}, 0x28, 0x3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000140)={r1, r2}) r3 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x802) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0x180ca1}) 18:05:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x101002, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f0000000140)='/dev/snd/timer\x00', 0xf, 0x1) 18:05:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4000, 0x0) 18:05:59 executing program 2: r0 = socket(0x10, 0x3, 0x0) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r2) close(r3) pipe(&(0x7f0000000100)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0xc0, 0x0) close(r2) close(r3) [ 808.466764] usb usb9: usbfs: process 9912 (syz-executor.3) did not claim interface 0 before use 18:05:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = msgget(0x1, 0x4) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r7 = getpgid(0xffffffffffffffff) r8 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x7, r3, r4, r5, r6, 0x100, 0x400}, 0x4, 0x8, 0x5b, 0x1, 0xffffffff, 0x8, r7, r8}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 808.553467] XFS (loop0): Invalid superblock magic number 18:06:00 executing program 3: setrlimit(0x1000007, &(0x7f0000000000)) socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/167) 18:06:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20140, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000080)={0x2, [0x0, 0x0]}) connect$inet6(r0, &(0x7f000090b000)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x4e20, 0x2, 0x8}}}}}}, 0x0) 18:06:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4800, 0x0) 18:06:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008992, &(0x7f0000000240)="05002745cf500000467fc3b828025184770600000000000000816dc78ff6ea6c16ff24cd977b2acab87fe2d193206a38fb6454266a571b046c8872ca92bbf9473c93660c981b857e181b817beb") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x2000001fffc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_gettime(r2, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4000, 0x1) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3f) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x888e}, @void, @mpls={[{0x1, 0x0, 0x8}], @llc={@snap={0x1, 0x1, '8', "2a5185", 0x1, "e7683c2b32f54927ca86911a748420b0c748c3665b80c481d7ba03ea8885fc1f726fbd0564fe0529676c6394697f011525fb2a9a00c4768fec73402d83daf2900b1bbf67827dbeae66e933ae935f73676a74d6cc5c9935ac405a2556a357fb16b35aed57"}}}}, 0x74) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) [ 808.832227] IPVS: ftp: loaded support on port[0] = 21 [ 809.069108] XFS (loop0): Invalid superblock magic number 18:06:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@setlink={0x28, 0x11, 0x423, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1a1) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000100)={r2, 0x800, 0x7, 0x3, 0xf85, 0x3, 0x80}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='vxcan1\x00', 0x10) 18:06:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) listen(r0, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(0xffffffffffffffff) 18:06:01 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000980)={0x3, "0c04dc2346c77ad2507c86005d0e0cfd04d8ba968571cf14eded8f220ea50c4f", 0x7, 0x200, 0x3a0, 0xf8, 0x4, 0x0, 0x5, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/kvm\x00', 0x400, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r4, 0x2}}, 0x18) r5 = syz_open_dev$radio(&(0x7f0000000840)='/dev/radio#\x00', 0x2, 0x2) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) membarrier(0x48, 0x0) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000800)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000880)={'TPROXY\x00'}, &(0x7f0000000900)=0x1e) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x210) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000007c0)={0x3, 0x1, 0x7, 0xfffffffffffffffc, 0x4c}, 0xc) 18:06:01 executing program 2: futex(&(0x7f000000cffc)=0x2000000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x2}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40000, 0x0) 18:06:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x811, 0x5, {}, {}, {0x2, 0xde, 0x8, 0x6}, 0x1, @canfd={{0x3, 0x81, 0x8, 0x5}, 0x28, 0x1, 0x0, 0x0, "4db0bda0c9e9cf05e0ddad3c46b0b566d5c9c4e27a8ddb51357157b3ce52d1b9f5cfc7f12fa48a1115df3935ea897ce11796da4857ca507ade80c341b52d90e3"}}, 0x80}, 0x1, 0x0, 0x0, 0x48001}, 0x20000010) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4c00, 0x0) 18:06:01 executing program 1: syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x20000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8, 0x4200) bind$bt_sco(r2, &(0x7f0000000140)={0x1f, {0x1, 0x8, 0x100000001, 0x691, 0xffffffff, 0xfffffffffffffff7}}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:01 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0x100000001, 0x201, 0x6756a2ed, 0x4, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r1, 0x4, 0x80000000}, 0xc) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000006c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0xffffffa5}, [@ldst={0x7}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/155, 0x9b) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz1\x00', {0x6, 0x5, 0x91f, 0x5}, 0x30, [0x7, 0x2, 0xff, 0x4, 0x6, 0x24, 0x3, 0xfffffffffffffff7, 0x80, 0x3, 0x1, 0x797, 0x200, 0xc0000000000000, 0xa3, 0x0, 0x100000001, 0x2, 0x6b, 0x9, 0x4, 0x0, 0x2, 0x7, 0x6, 0x200, 0x9, 0x2, 0x9, 0x3, 0x5f, 0x100, 0x6, 0x2ee, 0x5, 0x7f, 0x4, 0x8, 0x6, 0xbc, 0xfff, 0x5, 0x0, 0xc6, 0x4, 0x3ff, 0x8, 0x7f, 0x7, 0x9, 0xffffffffffff7fff, 0x401, 0x6, 0x8, 0x100, 0xffffffff, 0x5, 0x7967, 0x1, 0x2, 0x7, 0x1ff, 0x401, 0xf04], [0x6, 0x0, 0x7d, 0x40000000000, 0x0, 0x3, 0x20, 0x5, 0x0, 0xc315, 0xfffffffffffffffd, 0x3, 0x4, 0x9, 0x7, 0x4, 0x4280, 0x8, 0x8, 0x483, 0xfc1, 0x5, 0xe257, 0x6, 0x100000001, 0x2, 0x6, 0x3ff, 0x1, 0x3, 0x1, 0x2, 0x1000, 0x0, 0x4, 0x665, 0x4, 0x3, 0x0, 0xfffffffffffffff7, 0xe78d, 0x18, 0x3f, 0xce, 0x0, 0xffff, 0x8, 0xf5a, 0x1ff, 0x2, 0x7, 0x4, 0x3, 0xffff, 0x0, 0x6, 0x101, 0x81, 0x14ab, 0x6, 0x6b, 0x8, 0x1, 0x9], [0x630e, 0x8, 0xff, 0x4, 0xfffffffffffff800, 0x4, 0xfffffffffffff800, 0x0, 0x1, 0x9fca, 0x8, 0x81, 0xff, 0x2, 0x8000, 0x6, 0x1, 0x4, 0x50, 0x2, 0x2, 0x100, 0x3, 0x9bb0, 0xcdd, 0x800, 0x8000, 0x3, 0x9, 0xff, 0xbfd, 0x1f, 0x7, 0x7, 0x5, 0x6, 0x5, 0x0, 0x0, 0xcbc1, 0x1000, 0x7fff, 0x2000000000000, 0xe23, 0x81, 0x4, 0xffffffff, 0x10001, 0x8, 0x1, 0xfffffffffffffffa, 0x2, 0x4, 0x4, 0x8, 0x1, 0x7ff, 0x5, 0x3, 0xfffffffffffffff9, 0x9, 0xb7ec, 0xf35, 0xce9], [0x0, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3ff, 0x2a70000000, 0xfffffffffffffff9, 0x6, 0x80000000, 0x3, 0xc81, 0xffffffff, 0x0, 0xd9, 0x0, 0x8, 0x7, 0x3, 0x7f, 0x101, 0x6, 0x8, 0x6, 0xffffffffffff2abb, 0x3, 0x3, 0x6, 0x7fff, 0x2, 0x8, 0x2, 0x6da285d4, 0x4, 0x2, 0x0, 0x8000, 0x9, 0x7fff8, 0x4, 0x1, 0x1ff, 0xe5a, 0x40, 0xa00000000000000, 0x5b23, 0xf38, 0x9, 0x8d7, 0x0, 0x1, 0x2, 0x1000, 0xfffffffffffffffe, 0x5abd, 0xfffffffffffffffc, 0x81, 0x7fffffff, 0x3, 0x6, 0x2, 0x8001, 0x6]}, 0x45c) [ 809.886429] XFS (loop0): Invalid superblock magic number 18:06:01 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x4000) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@remote, 0x70, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x40, 0x205, 0xc00, 0x1ff, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r4, 0x40}, &(0x7f00000002c0)=0x8) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x02'}]}]}, 0x20}}, 0x0) [ 810.227114] audit: type=1400 audit(1562090761.612:152): avc: denied { prog_load } for pid=10366 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:06:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5001, 0x0) [ 810.451189] audit: type=1400 audit(1562090761.842:153): avc: denied { prog_run } for pid=10366 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:06:01 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x7fffffffdfffffb, 0x0, 0x2, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x805, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x31}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x20090000) 18:06:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000140)=""/108, 0x6c, 0x100, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) listen(r0, 0x9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(0xffffffffffffffff) 18:06:02 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0x0, 0x1, 0x4, {0x1, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x20334a50}]}}}) prctl$PR_GET_TIMERSLACK(0x1e) 18:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = semget$private(0x0, 0x3, 0x81ef17d149334a86) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = getuid() r6 = getegid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000200)={{0x1f, r3, r4, r5, r6, 0x40, 0x3ff}, 0x6, 0xfffffffffffffff7, 0x6}) [ 810.696213] input: syz0 as /devices/virtual/input/input16 18:06:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5300, 0x0) 18:06:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x805, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x31}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x20090000) 18:06:02 executing program 4: socket$rds(0x15, 0x5, 0x0) syncfs(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x4, {0x2, 0xfffffffffffffffc, 0x100000001, 0x20077f1}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x7f, {0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfff, 0xffffffffffffffff, 0x40, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) 18:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x3) r1 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) pwrite64(r1, &(0x7f00000003c0)="e6c28e731b1757ecc0c921a621d378c85b58b3a1ac694f87888566f7705df7cd9a8a0fefb06aebea3ae5dbf18b38d2e853998915a905d7c4f87233ac8af3d31217d57c8477f953944c8ac82906f7667ab4b4b8fc926776c77d636505c0469b4a87f06ccd48c75a5f40b085553c0403", 0x6f, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x290, 0x200000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10090098}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000200", @ANYRES16=r3, @ANYBLOB="040e26bd7000fcdbdf250100000000000000014100000018001700000001000000017564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0x0, 0x7fffffff}}) [ 811.091669] input: syz0 as /devices/virtual/input/input18 18:06:02 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x200000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x20) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:06:02 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ubi_ctrl\x00', 0x80, 0x0) r2 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000015c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000016c0)=0xe8) getresgid(&(0x7f0000001700)=0x0, &(0x7f0000001740), 0xffffffffffffffff) r5 = gettid() r6 = getuid() getresgid(&(0x7f00000019c0), &(0x7f0000001a00)=0x0, &(0x7f0000001a40)) sendmmsg$unix(r0, &(0x7f0000001ac0)=[{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000000c0)="305ed3ea867841667c7ba72816efe691ffd0b75de0b553c7fbaffdcf72b6ac32be027fad048ad8eecd7408e4466fc05b8504b412cc15bd738793be2e", 0x3c}, {&(0x7f00000001c0)="10e0901eda1dc370173f22331510bf8ba37c6377b11babe57bda4663a8d300843c4720bbf5918d51bc2c83fc43a3ad20a9b52f753eff193cf391655d23fa58aab7a5ca811cc7260062d97c151818841c3f8fde164c25e91c3e6c9a790f1aab9157136cc3fbf97d19cc7936665bcab50ae3480fd0a056fa0fee735edaa9779846da69bd473da1f3476f900d4e79b6fba11aed5df4b4b66a6d29127236d18e5578bbe3f50aee54e7ed4a8cd09f92b628236e30636b2072793f40a74e8c41", 0xbd}, {&(0x7f0000000280)="258414021727e1acea26ade4ca751b1347926742dd37a9fa24a44e4d202ff67875665e83d3efe4ff6a791c9b9a7575c4a46f29ecb36ad939a52150b52cb356c3de3ed32fb939586047e4ce3cb23dcf13617258047a4fe8dde0a42a22f7e31ae78d1970adae662d287242ea42b82ecd2f28064ec63b04b6c1a7bcd1b288063cae0f62acda412fe82f43783ca229c5ab76f9d737869877f1148a85a1028040fbaf5a6f76730e4ef163b8677302a7e47b0b7762009aa661ca74a07d2501d63a5da4022d317b19ae9324e570025f94f31712821e369ac2369cddc16ba38d8e26f866059d82e87ad8b5f300fee6", 0xeb}, {&(0x7f0000000380)="7a81c64d8b249004a756f2b80d2f8f9253d1abaf8de4ce19658635b17c92aee4a809fcc15631bad3b38a4a696dddac2ae8a02bd4e38e7b2f4568194036b81604a2d20e94db3f7ad22553a684e48c748c8b9ef551344ae611b835fa79f396a488e6d539b6489e9dd9a29add38e6a86568ca0c43bf46428af3904e595c4b5339e6caabe75ed0cd8e64b9f423213fbab46fda00ed2a86fbcbc5dca48f1cc4b5f9f8c698331417bea757ec5bb7d7366ab8bb82bb578af612a35be70854acb9b7123fcc9f2bbde7288eba336d3dfecb1bd5a768b753981ef52c34b287a1237969a4845b065a", 0xe3}, {&(0x7f0000000480)="7b33eb86b64bce2559ed9ecfb74da05362e836feb73e81bba6134238f6e3b4ce0d64f5f45f9b78f62e2f74d1943311861e0e1e73d0291e69fa459c3619ba802d3ac92854fa948c250a472a8373ba0894d2ad1a221b57b7e694a7cb038e89c99845e59c6f7b8c7707466b7d5eb5049e", 0x6f}, {&(0x7f0000000500)="bf6fe0772477439caff9ce59bd54bc5f51f9dc4806353e34740c594eb85fc57f868cc18a1cb01e817b119fab01237a33edb5f2a8a96c82305e401146e2a4bc7263246d40bcda2f2a337f6f17163965a5ff82c6e0d1f1684fbca5d60744d0f7ffb734408513e8a788cfe42eb08e70628c39c8ad7ecfb09b2c2659b99b6a968ebce2a6af28408449a3d690bea25e5afae3f55a4372d5026fe1326a69060ce49e63622ffff2eef8eb056498a6efd439ca53fdc184584001fba2c29ca76c56c21cffc7ad5cd29d1fdaaa3bec3494ceb8e8e983bef1f52af5a458e99f644b369adccded0ec4fcf421192159aca1aa55cbca6f8bdc8dbee5460d8c0ed1a110714470fbd99d6e62a0fbeac0ec44ab40282fce3ab9b228eda7b40a966d5aa95c3d8b6d21e687ab58dbb519e73e71cdb07f72337809d0f52f68c9da0722a7e682397c52c09c06f52861bf7125026dd5ed855c77e1c60aa952cd3066bbc829d0a461fc4b1edaf9fcb976767a4f24f65b1fa5e1aa999a946d262e7951729513a374f31863f2da9324f9d2089665d80eb88a69f8fa48b006c7efe2f5f324a3c4ba449d2a20d78885770727cffb367a667e80c5b43b8bbf1906355da6b46dc1bb229c027895b25c526d3d105341c741ee5a8f94e57d506c05ab28ee72c642628f845289faec9b7024e26b5ecf79ff5f44d107bab1cdc853a45993214d0eb8f011fa41fdb7b4016e421a0f7a8c5a50c404b555df7ea866ef3938e658ce2b5f928077bdc7473eecae89db4657a1f9a6cd86152a8977549675e01c377ee5fc436ab12bd64452204e9b2528ad15fd71a60ab030af1a7f62ef2f17936d30a82bef83b77173b718bf3751a681cec910cc16b497828ef91e5c9c18b74202efb5aaee5c7d44147f6b6130265b1f8ad74cfacd8434bfa4986d4c50a7cd3cce665538f5a6ea549a2f256b5d6c1e4784c9121f27a313dbd17e03cf1f594e6549f9901eb7db506dc250bcb4f3c0ff9f191e052f8452ef6cb10d6404ce7a09d13cedab7f6821fb8ac52522a160f71c2eecac38159dd32031e3ac83dee2f6b396b86eceb1ac6ac84adeec591430f75297478c0d5372509701ce7ac70bb2c2f29a5b10752e1ced6c710c18fc7e70134b0bd5063379664bc6154575b030c1aba07f063cfbf9e34632d24bc4664542a43add1058970755f00b5b80a20fc2ab2a28e30ef423897f77acc0a2f38b7a3b8c9e7a33681b6917332ff89aa3865278e979942882d3a73a715ef3c01a663f4224c3101db7089ce960292ec487b2e46b001c8b8853b1531c756ab6f921eb2de8579df69d8ed77a3b627bd7d9f7a6073167157014b530cde75074b73cceca22aa195508dcbf73e042ae367013a4fb564e872d26cd937078c497f5645fca7057df629f02a34583105876d985f3be206b5266be0b10e1a05cb9618d65cf0dcd5a66676dbbbe8769042b13e8480f9327e5d44afe88f4ee407a142e733403460f7a67043030abae513d700a48fb05f2954dea76bf73fa48cc76dbf5d0199e40624ba0e58d0bded5b5fa592718398cfc922f98e6fdceff5e6750f866ea4c5938561030ed45385e9a4e734e842d01a0219cf16974c484d301937afb98abecc0e1e1730101c4bfebca7b7a75c186887d386efcb52340fb8f03b44c069a8c007317a8017f9028c9a085c5575ecca619d17884da5d00ea0a2645b9c7fef3d4ef8ff1b6dd58d7e9e33a258246827fd302b15a2a673b615b58f7916a623cc0f34bef7f052b7caaa7b7fd1a8d3efcf8569afccc16c1ffac9e6e68f87e79b742ca74b518297ed771ae43d52201c7ffcc3c5fe3d3ddecb4b4cdb7b44ea521df7c81ab99cc471aa5d4e918a7fa1dc4cd049a2442684adef571d56c1d562dba5f6c940d212894f54407a4ab20335d6949fc27b3c6221e4442537c457aac8762642172f625e611c227eb7e455a0cb1daa08f68b8c7204308d32288a049d3c96b61bbf539199c9f0c05b5809a8a067afac6c2adf0617111a31ea181cafce6c45ec0a793d14de47db1a1f0005053260a093c11f60ca282d9532ba87436bec40f44cf0b8d480d5df2c067fb7b1d7342aed1fa2dec6e9216442fc7d16b12660ecdbcb7e072941c189a6d8bfe727910002d53c366eeb7d2a163712b98352f0baf6ea9b366af4fbbe7faff189ca33bfc4073b9db321aa36b5c205be6ede2c2f805f0e9187484782dadf687050abda976282ee7d016ec9450942396a2d3fab6ab1872e15cc268f9eeb2c02940957378b2a166863039f288cc4194e65c0312b48dc08f17cad761f6c1937d84acb00e3acde4b0b2754d69818a4dcbe50c257472339b87c50814c46cfed79bab0c0352334e9b113976a9b7fb2bafe98a82c4287be2577d56ef96db4c31c3bdb189acad5fa0b1e11d85d8e11fcedf1316989ebeffafbb770270265e4f45f893094171e0d2d10c385ec9fd0c2d69a94f5b342c804e1f06bca96aa519ac50748946318c9157dce189427d3e69efcc8b154f90cbfa017dc44c33ee4f6661cf7aa3e3015462d6b4d007cc76598081c83fc2580003a7c980b50771acb021aa9521397833cfd11ce87a4c7268ec7635d3571431e96163b53ae18b6ba8c361dc1456bf9f41498bf8d038566ed9b25c65c60574bfd6de03dc71301a1dc8faada7a0f6c06c570a46e7d78e888fe3073644c99e8032397967c3897205902ff6f9034ed16871baf53d1b6d505f54c9a33806d449b5901ce27070897c5571a50ab7d824bfa52e91267049ae40c1c652174aa26f4f08ff0505f2270b2714463ff7cf0705dfa23a0116e3190c60951792d8df26708801662cca1129a69a789919be3626ca08b55410b5c70b559a00836b18967a1e6118a8e7b2568d3da1404aea100fb7d4493cb640911c4d2887ce8845e45c09e4a8cece8b768b219bc315d6d803a28ddeba002a547b211a0b2f87029e991fb4c0d951014a9fe1372bb5360453db81934d6ec5a0305cdb73b567354ed1977b347e77c7eb38777897a73ee20ad58902184dc1048c5b791aff1de4eaf650e29d1803c051a65939cd3eedc877a003688063f2bf26863cf722ddecb75ad5a71c8b499771680b45b5ace833df32bb16329d27b99573f525905b2212f00285aa9893831ab8a60131a4dbfd093e578c9db30d0c35edd4b4af1440bf0bbcda8a94a9795955d1c5ae5f758917b493269e2b5745defd0b340e697ffe5fc4b8d4ee42d0ba62d5b49338193931a963d2f1f01a4764c73edb13a1549411f73f1fbec622cb30dd97e760d554fe91cb099f8a3fafa433a10277b210406b485c2ed322dfd3e4310b362e163456d5ca4021c8d9f1a8b8466f294920828ddcf6be19b4f7b442bdcb4d1f62be566b2a5d5838019b239d38f84aaf215ac9409b4e2d68af0b5863550aca580f19059003439bb5245597a6728c333a3d3984752b56b5b9393ae08d7a9d53bb07f110e89fac5dbf7723039909f89fa05711a954d0ad7d208a4e0c6e7397642c2d5449d4286dcc532c0eca7f583f3379da24fd0c788cb38c91cd3b93d3f8d7abb51f0e2e16d8c932114d0a808dacc82bbd427fa49d91f66813e7f041645d1928b29b50f0daf088dc19297af9faa9df217ae2255f8982dfea2498430765e9d31746da18a747bb1d1f5465fdbef2d336bd392261eb38189d2c9eb71c188fcba32903dddfda5195eff7a66c3b9d0a0afb14ec8327ea1de01fdb224c44093e3264d042f10734e369335f59fee1c451749f975b18fee7887886e0078ae107f941ddf37df0e63fcbbce9f17d85e35c06e2e885583a6e80b11d4fca3c27f430c6274c0d8b3e83235763816bef3e8ebb0e0eebc180a7216cc31361c5f4c5f49a143d761767434920cd6855bc03942395718be42531bab0c3ee288ab13e235fad1d7143f4ca817e37d9b6797b0432d1a31336ea96d13b5b0551f4c4818de6f4260cd7443994c887355085c5d69acffe22df8b17af9ba8c1e14cfc0279de9fd4128c7dc497c77c14c93b878c1e42b136f715711ec1ebfb8a2de806c7dafadefaa7374c280882e881d77450cc30523ce3735d6dc8af5e12475fd8b15aa7cb94af0c586ce0b0a7259c601cc744f2cc13668c6d05713fe4e4469c46dba9531d2021adf52f0c86f7316dfd795481256a463a863a9a4454a68d30528828eabc135d59c88e1119179b8d90434af23e17a32dcfac763550962d0ecb6019157c3662a4804b865c2d4d7fd6134bc91c4b636017632d925fed97723083e56efad004c85cf8789f3ce3f43e364ab30689ddaf07d5cad13a51ac802e4ff7a98e8f70b3b6e4c04c4167f2f288e123fbb1aeb43ca49080fe1fab789b4b3d1d58e2cea64f24a63e71b943b84403e47dea4e18502f87a91f2c51c0f69ebcc5888c55ee141eeb7d440aefec1cd4e0f929a105b139d827045e87530078e64a028c1e686bb8e018427e47d177957b4aae03214f618d73d1458da9b5378e5a92cc8426e3fcb2698a101bcb75411cb71afd8b8d5864fbfdb91bde14802bec45a8591ca61516811fdd875ec951dec44831856881e7771f90294efa64d38926069ac278ae246acd6163e8360ddfda0692883543afc94d74d6344469d2c025f489667ebe9bc34ffd53ed421e5c6f6f526a8858704fa158eb4e8aacb8fe5b88c13b2eacb6fbd155541ad6fb0690f8875e38beb2734e0c0ffa60f144a0cf5a2c287299a94de70f1373a802992a943b96c3dfdf955eeac0388aa9e3483baffc9d68eaffb4a86c12d9c98e53e7563c9e94b4c1203afd6243cf691851bd205740da83ee103cff7a95ca33c6bf1c2b6b5f98390cafd238dda42d4153af16655ed3e82631240c904f1e52da6c13a5571a2779cf56d7a696c0ad701af41ac107303d940208b3a52a74931f3ef5dcb3c21660a8336f2e2a3091f6e147d45cc0fabc371a8d225a79e54133411eeb25d95b53d0b339ce2b36229476685c9a74ca74a413501aea77ced1898a73a092f656f25e01ccacecbad47b37f04575679928c859f7b3c4f9f8b8abf8778c14ffabe474460f759f5cc8bff001ed106df747a6a87cc6491d8b468a128c6389455d047290262c887aa849acf417045b77d4bf65c6bdf4292e3510627acde5903d5205dbc1dbebdf91a7204967aef5f088d0641db8918d4a15e31117e48bf1b38320fd120961bf33cc0bd03437b1294906d7563f1a4b17d733854acc2b1aab4a7c66f9ed871ea18c2d2916a1f6de686e82621532d2a9da1e188b1b5f33ebaec28e06715ecbf61d5a69e301dc462f25cdf766fa3b3b1616d98e7e72bb4999fcafc15f17db07cc33cd96d8d15e9a34a2c0b5f030b382108a5f0ecc9bb05c069028d1e7aa8f96eae6300835e7025b29ee857159aed46a728aed125545d77a904e716552eef8f11a37bbfbf67e613a9270971d3d4ea64948d0367b391e406d146bbb71d1df7eb48757ccdca6c08939dcdad8607aa26d44504c2012e0260848b86701ae6516dec1352d4794b68e81b11c25d1dfc8febed91d63ac1bc054d7443803490a5fcc6aaeb018ec82d4958465f19bec1375649ee1648ee7a565b51e1b46c49cf2087181d456e1dab7121aa8b7ec5336f460ae359d84bc0a762cddbe0e09b831fdd5496c6e703e8fdf38c619c176bb18dbe0c392b60cd1a148791f0157dbf95993b68226a69aae50e53d51aa98edc73e0270767c39dbb459febae461adb9877d2dc89588cdaa8a5ab5e57331700a76aa1deca8b1c0d37ee939bbda1277ef482c7b4d0d71eaca1bbe5d407f766871719546c213e9b42835c5de566f64a26d", 0x1000}], 0x6, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x38, 0x200000c0}, {&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001980)=[{&(0x7f0000001840)="920208e47f44d932487141520574e774f93677c95ea711c97be14918e7f4c40ded0890ef12aa3520a13c70b26d373ec87f1010c87594759c7d9189fa3b701088644eb19676456c04f9400262f301fdfcba5472f14faba4b3293e38d8f2cdf4753f9dac19ad56b280250031eaf59d71bd72e2d52f0a7dc5443843a4fc5efe9adb67e283145cdb40152809df42fa6732a7c8a2e6d045a61d1fcc05b08f4b74a8dd2de7cc3b9820419cbc3f937588488701a4aa3dd0fbc910652132f55d9d1ab5e8f5cb9dafb40a99452e8a7fb3f599b984780ad79f57cc48650d4fafff75323e0af8e1a79f55d0bb024a", 0xe9}, {&(0x7f0000001940)="2b3a075633304d53a430318eaa633057407efa7074e4e7bf", 0x18}], 0x2, &(0x7f0000001a80)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}], 0x20, 0x40}], 0x2, 0x81) r8 = socket$netlink(0x10, 0x3, 0xc) writev(r8, &(0x7f0000fb5ff0)=[{&(0x7f0000000100)="1f00000002031900000007000000068100023b0509000100010100ff3ffeee", 0x1f}], 0x1) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000040)="1f0000000103193b130907000000068100023b050900030000004000020058", 0x1f}], 0x1) 18:06:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x3, 0x0, 0x0, 0xffffffff}}) 18:06:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x805, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x31}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x20090000) 18:06:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6000, 0x0) 18:06:03 executing program 4: socket$rds(0x15, 0x5, 0x0) syncfs(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x4, {0x2, 0xfffffffffffffffc, 0x100000001, 0x20077f1}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x200000000001d, 0x0, 0x0, 0x0, 0x7f, {0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfff, 0xffffffffffffffff, 0x40, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, "77100b6a1cc076a15ad9f0552d5b12bfc338e5269b12ac2a4ee4202c64122b0a"}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) [ 811.578927] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 811.648994] input: syz0 as /devices/virtual/input/input19 18:06:03 executing program 3: r0 = socket$kcm(0x2b, 0x200000000000001, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffffffffee4}, 0x20000004) close(r0) 18:06:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @empty}, &(0x7f0000000300)=0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000200)={r3, &(0x7f0000000180)=""/105}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)="129ff1e0c032ef65c8a5e0049a9b08b6ad9953b6fa4d2f91d75e0ccaa7e46db96dbd9f15b797b1b230f14b9eb33a1db1aff8e72cd5ebc9ac6f79c35300f979cc0a9fb0de879374832f0bfc37573ccc0b03fc7b978810b3e638d793e7a41ead2b220f763e8c3e5936eae24bb83f73725e37ebdff6b0dc97f4de995fb8200bb66f533b47d1260468f40add951348b636632268e122cafffd801e8db5515ba0710f73841532305dc9c1154235abb9d6cd67bbb6b7173efa553425883d7f15b19e7e62c933fb518b595f93c45ab240fc5368085ba6dc579d8d8c3543", 0xda) 18:06:03 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) getgroups(0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00]) setgid(r4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x4000, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x805, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) write$uinput_user_dev(r1, &(0x7f00000001c0)={'syz0\x00', {}, 0x31}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x20090000) 18:06:03 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000400)="d3", 0x1) 18:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6001, 0x0) 18:06:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000c00)={0x1c0, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x14, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x409}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10000000004000}, 0x800) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) epoll_create(0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x10) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) getsockname(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:06:03 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(r1, &(0x7f0000000280)=ANY=[], 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000740)='./bus\x00', 0x0, 0x34) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) socket$inet6(0xa, 0x2, 0x0) lsetxattr$security_selinux(0x0, &(0x7f00000002c0)='security.selinux\x00', 0x0, 0x0, 0x1) sendfile(r1, r2, 0x0, 0x8000fffffffe) lsetxattr$trusted_overlay_upper(&(0x7f00000006c0)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5f97ceb23c51ebf8f90909cd039c1e076aa55bd1c52de6a0387fabe89bbcd049a8522ca0465617244ea00efe6c6b1494624b17580f0f4471f6b5de7aecc3df6156b4dd6de8c169cb8574004a185498d07afc27c05244b1051fc402a6937444c9d489899e2d15fb44262d528a88d86484f4aa0db45da11b871af7c3ad0c8e08f4fa5a91"], 0x1, 0x1) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000680)={{0x0, 0x7530}, {0x77359400}}, 0x100) creat(&(0x7f0000000140)='./bus\x00', 0x0) 18:06:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x4000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) setsockopt(r1, 0x5, 0xfffffffffffffffb, &(0x7f0000000200)="9fa4d1d7cfe94583b9465b1b7e06c0b10f4ab1d83dbbd34dff28d4f25f07b0714036fc5870a45a8daddab7617e0c19ad7200e7aa06f9a3a4ff3c940559be57be0b354b958a02ae3fa8901d67c3993f9fc18e77e3bb4881fe829b1255aea1b30b1d998796c8938c165313a5bcfd77e945483345468c3c893f05609591c1ae1d92f2af0e30b7f0b34792150383220fcf45d97cc62ddc8cb51181add8be445fa9f00931c52172", 0xa5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xfff, 0x35b06454, 0x4, 0x1, 0x3}) write$P9_RFSYNC(r1, &(0x7f00000002c0)={0x7, 0x33, 0x1}, 0x7) [ 812.064292] input: syz0 as /devices/virtual/input/input20 18:06:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x40) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2, 0x0) write(r1, &(0x7f0000000440)="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", 0xfffffffffffffda8) 18:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6800, 0x0) [ 812.224305] audit: type=1804 audit(1562090763.612:154): pid=10985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=17753 res=1 18:06:03 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x1ff) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) sendmsg$rds(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x104e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/16, 0xfd0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x60) 18:06:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x807fd, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000180)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r2, &(0x7f0000000140)=""/63, 0x3f, 0x2000, &(0x7f0000000200)={0x11, 0x16, r3, 0x1, 0x401, 0x6, @random="95779bd96045"}, 0x14) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @multicast1}}, [0x101, 0x1, 0x20, 0xdd, 0x5, 0xfffffffffffffffa, 0x9, 0x582b17fa, 0x1, 0x4, 0x800, 0x2, 0x5, 0x4, 0xeb33]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000440)={r4, 0x7ff}, &(0x7f0000000480)=0x8) getpeername(r2, &(0x7f0000000240)=@nl, &(0x7f00000002c0)=0x80) 18:06:03 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000340)={@initdev, @empty}, &(0x7f0000000380)=0x8) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x3c8}, 0x3c6) shutdown(r0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) ioctl$TCGETX(r2, 0x5432, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800) 18:06:03 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x80, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6c00, 0x0) 18:06:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x3ffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x80, 0x2, [0xbff], [0xc1]}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x2, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) 18:06:03 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000080)={0xfffffffffffffffb, 0x40, [0x200, 0x4, 0x3, 0x80, 0x5], 0xfffffffffffff069}) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x0, 0x20, 0x1}) 18:06:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000140)={0x7, 0x7, 0x10000, 0x7ff, 0x8, 0x8}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 812.668614] Unknown ioctl 21554 18:06:04 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000000)={0xb62d, 0xb, 0x4, 0x40, {0x0, 0x7530}, {0x4, 0x3, 0x7, 0x1, 0x9, 0x8bf, "515d963c"}, 0xb4f, 0x7, @fd=r0, 0x4}) dup2(r0, r1) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 18:06:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7003, 0x0) 18:06:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) 18:06:04 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) ioctl$TCSETS(r0, 0x5402, 0x0) fsync(r0) [ 812.842106] audit: type=1400 audit(1562090764.232:155): avc: denied { map } for pid=11354 comm="syz-executor.2" path="/dev/audio" dev="devtmpfs" ino=1603 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 18:06:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) dup3(r0, r2, 0x0) 18:06:04 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc0800420}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x34, r5, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 813.443695] Unknown ioctl 21554 18:06:04 executing program 3: ftruncate(0xffffffffffffffff, 0xfffffffff7fffffd) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x2000000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x5000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize'}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@appraise_type='appraise_type=imasig'}]}}) 18:06:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'bond0\x00', {0x2, 0x4e21, @remote}}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x800, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000ec0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001100)={0x11, 0x0, 0x0}, &(0x7f0000001140)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000001180)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000001280)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f00000025c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002600)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002680)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002880)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002980)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002ac0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002b00)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000002c00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002c40)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000002d40)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003080)={'veth1_to_hsr\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000030c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f00000031c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004340)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000004440)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004480)={0x0, @broadcast, @remote}, &(0x7f00000044c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004500)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000004600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000004640)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004d40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f0000004d00)={&(0x7f0000004680)={0x650, r3, 0x610, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x174, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x7, 0x9, 0x3, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xf4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x178, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xb4b}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xb90}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r16}, {0x1b4, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xb9}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x33}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r21}}}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7400, 0x0) 18:06:04 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000100)={0x80, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:04 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9820f0f55235a6ce2ca534e7822a841b22638d44ee2a0cb95ad7cfaf5bec09a06ad2e48f9fa4ba4e5e66"], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x9c, 0x4) unshare(0x44000400) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x80) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000200)) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000240)={0x3, 0xfffffffffffffff7, 0x7, 0xc1195b9, 0x9}) 18:06:04 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000100)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 813.673688] IPVS: ftp: loaded support on port[0] = 21 18:06:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x21, 0x1, 0x2}, 0x4ff}}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x6, @mcast2, 0x1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r1, 0x20}, &(0x7f0000000200)=0x8) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x1}, 0x6}}, 0x18) r3 = openat$cgroup_ro(r0, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000380)={0x6, 0x6, 0x7fffffff, 0x76, 0x7, 0x1f, 0x7fff, 0x6, 0x4a, 0x8, 0x7, 0x9, 0x0, 0x5, &(0x7f00000002c0)=""/166, 0x3, 0x7f, 0x81}) write$P9_RWALK(r0, &(0x7f0000000400)={0x16, 0x6f, 0x1, {0x1, [{0x0, 0x4, 0x8}]}}, 0x16) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000440)=""/180) r4 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x7e593aa0f51efe10) r5 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="4914b61a887b3bb65cce5aa73b48c18b16770e9771b933f03405067dad4c1aabf38b43b367ffeff63a741d492504a7f096302f05ebda7fe5299f55613612d91d5eccfbe62a9ae929219b13518410dfd3ddcfaada5ce28acd4394307700", 0x5d, 0xfffffffffffffff8) keyctl$invalidate(0x15, r5) getsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000640), &(0x7f0000000680)=0x10) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/full\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000700)={r1, 0x81, 0xfffffffffffffffe, 0x400, 0x3, 0x4, 0x8001, 0x5, {r2, @in={{0x2, 0x4e23, @multicast2}}, 0x8, 0x2, 0xff, 0x9, 0x1}}, &(0x7f00000007c0)=0xb0) vmsplice(r0, &(0x7f0000000900)=[{&(0x7f0000000800)="70a67f5c62742f588bf85a7adc67e5ec0a0c77b0f7b38b2410068b84dc81cd2e70c49e230348d93ede679d6f2c21eff41a63c4ae1a6a162908327e03560af44a2cef737306e4051b7f8ca547a07ccb850c99c8ba25cc90daf3297be7716d7e4de23298be2aef553100695580284a110b20d42e767b73c18d3f3100f87d8a9013d4cd33da53b8b9737e1e9bcf8770cd9d4f5433d63510d144d4e78e8314ada9547f422ada06064e278fb8227dc5b29e2eb7b3acf00d9adfac28166fe065b4d3e8a0ad684ea5d7c562d8f1b084f187d7dbc95195adec5d88ecc8126cc087227b320565b5b9", 0xe4}], 0x1, 0x2) write$P9_RFSYNC(r3, &(0x7f0000000940)={0x7, 0x33, 0x2}, 0x7) getrusage(0xffffffffffffffff, &(0x7f0000000980)) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000a40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000ac0)={r7, 0x2c, &(0x7f0000000a80)=[@in6={0xa, 0x4e21, 0x4, @mcast1, 0x3}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000b00)=0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000b40)={0x0, @aes256}) bind$inet6(r3, &(0x7f0000000b80)={0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast1}, 0xe1a}, 0x1c) ioctl$PIO_FONTX(r6, 0x4b6c, &(0x7f0000000bc0)="26a9506a2cd8411b347b79c18493019eaa468666ca87bdc0f12b6ab57a7afc1051b75422cc7084ee8dfaec3674aaded8596b1daabf2fa5a388c5cafc9b237f9915e24e951a2e36f2fdad264eb442847ec2fc8ff21ce86cf5d9d92290e2df608fdc7f915d58de0a9456091aabf299c15e8f5a20416e584f14c19bc31cf4b7660867bd9ceef9afd0a3a9663eb8735836490375d4eb757aa3827360cddd610df1fad904f50f29515c7f6cbdbd093c38e9fce22a0dcf5fe41a99b8ae38cc44107abc11d82e4e5c6831") prctl$PR_GET_DUMPABLE(0x3) getrusage(0x0, &(0x7f0000000cc0)) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000d80)) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000dc0)=@int=0x8001, 0x4) 18:06:05 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x760000, 0xffffffff7ff0bdbe}) 18:06:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000140)=0x1000) 18:06:05 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) r4 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xe0f6, 0x101000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x7ff, 0x9, 0xe3, 0x1, 0x80000000}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000001c0)={r5, 0x7}, &(0x7f0000000440)=0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x56, 0x400080) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:05 executing program 4: mkdir(&(0x7f0000000780)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000100)={0x61, 0x8000, 0x534, 0x102}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ramfS\x00', 0x0, 0x0) chdir(&(0x7f0000000c80)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x140, 0xffffffffffffffff) clone(0x900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 18:06:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7a00, 0x0) [ 814.454047] vhci_hcd: invalid port number 255 [ 814.466740] vhci_hcd: default hub control req: feff vffff i00ff l65535 18:06:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2", 0x49, 0x10000}], 0x0, 0x0) truncate(0x0, 0xffffffff) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000740)='/proc/capi/capi20ncci\x00', 0x4002, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000780)={0x6, 0x70, 0x9, @empty, 'bridge_slave_0\x00'}) 18:06:06 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300021b0000000200ebffffff000005000600008000000a00000000000000000000997f6699000000000000d6dbb905d1f86beb0000000d000800e0020000b89dc4b2bd01a12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe174e404721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084de1840039649673b73383b715e127c6a36da871a86cc8c8dda870000000002000100000000000005000080ffffff05000500000000000a000000def7bd3e10c05ce0099e088c374525b1f361d6c7358f00000000fe04"], 0xd8}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x0, 0x2) accept$packet(0xffffffffffffff9c, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) connect$packet(r0, &(0x7f0000000680)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @random="ff0f6e3b8635"}, 0x14) r2 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$team(&(0x7f00000006c0)='team\x00') bind$ax25(r0, &(0x7f0000000800)={{0x3, @null, 0x4}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000880)=0x1ff) sendmmsg(r2, &(0x7f0000000180), 0x40002c0, 0x0) sendmmsg(r2, &(0x7f0000000580)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x3, 0x0, 0x1, 0x1}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="46ff09aa197179ee5d4a781808e25ea3f2f8c00bf22a47991560a50ddd46f247ac2f9f6e4359ca09dcbb7623fea5a4d844", 0x31}, {&(0x7f00000000c0)="f5d6e3abd65beb1474a8aa01b07cb0e41055c76d2a22df7ce58c2e599bee41a1ba352647bc7fdfcce41888ce92e61ebc13aeaa89d85bf8ba1947a36c4640d6f66cc479c33adc7b7424e4bf64", 0x4c}, {&(0x7f00000001c0)="4c6fb1e26cb23e2492d97e452bb86bee6298e45db1bda9557a37a71027132e07c56cca5e1c93f9e3e148c04a4ec9df1944db66c7196fa8d7f0e2d92f42b255f5c76b16a2fb7c053766b46d7408818ed821982b8b5e1ca51bcecd2ae852c5f795ea24b7078488bc6763cf1fc7b0cf7a94a780489b46aae131790d15368937fd15036aac08cffb33c639c9d7085c5cf62078f849f6b1c22a6339cb25f549bec4fb8b330ca366bc9d548c57802464a6745648bead86a24af8f0f29d", 0xba}, {&(0x7f0000000140)="dae3009ed25ba16a69964c177e2a2324fdc0ce6738322237f219b0da691b00d9377448acbe64f556ed5f07a597e1b4ab4d2cfb000ba9c9d8", 0x38}, {&(0x7f0000000280)="a5e167fbe6f0c402d3865fe0622f30b65596b4c79ec4c8c63addcc0ac07747952dac8570dfed16fa4882da52b501d16bf03e539bc78d1c95c5625bc30dec36a34a1f0033a28413e38f18c6dc42bcf21c37bdbf3a3d33ad2f", 0x58}], 0x5, &(0x7f0000000380)=[{0x108, 0x119, 0x2, "7d71032f688a6f78b55dca079a6ff9cc81096e19721470b559c532f29c390d9cdf71c4c1a6a2021d2fcf0e8401bd26281429cb35a8b0866b388f44b12280829a92b4b8973f2c060da5fc077f5ac2d663495a9c795f6ef5c4bf8de5e4ce45f1ca1fa0419f2982c9a39547a3716c8ba21509711d585fa6710da7e3e38a8a5c6923066be7d8b22180826b31b9bcc7bff3d2f87f3ad705fd0bb7926de4eb892861dbed9a3e59d5b2a59435ee564b8540403c4910f8aa690bb7be1b442afe40b5771a75add690a43a34e256c37abadbde0ccd2eb7b47ea9220e34e09e4f09c6222eadacd9a9740ce49c68e4f0bd91c36d79e25b0a"}, {0x90, 0x116, 0x100, "247326eef99eab9ee8f2337b8e4c7369e96217e0e009e78c194819ce30957217c18327d4477638778fa769993a0df23dea03edb5234c2a89bf12abf41fb1e8b443707b1ddb94e1d7a32c8ca39f44b2252b011072b34ce3229d48ac2973ca3268ac88cdf8347f5481e3f7b22b225c04ab7e146b5fc6208a3b6f2caad4"}, {0x40, 0x116, 0xfff, "a2a4d4e1acbb92e6b860447f6430cf63e4aae5a4fddeb2117db8cd83b2467a6cbaa80b1fc46510eeced5313559ecdf"}], 0x1d8}}], 0x1, 0x80) 18:06:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x288000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x48001) ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000140)) 18:06:06 executing program 4: clone(0x822102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r0, 0x0, 0x8, &(0x7f0000000140)='keyring\x00', 0xffffffffffffffff}, 0x30) r2 = getpgid(r1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={[], 0xd776, 0x3f, 0x1, 0x2c000000000000, 0xf3c, r2}) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f34"], 0x2}}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'rose0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00e30003ac000000d9"]}) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) 18:06:06 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") write$FUSE_WRITE(r1, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x9}}, 0x18) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x400, 0x31324d59, 0x1, @discrete={0x2, 0x218}}) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:06 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x7) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="5af3f01ab8d6016962e5f6c5f7f6ce5c423b41924be55b8a7e66354fa8d2221af2dcebc03ce41a5fa1343ac5952f05bdcbe385231d90c859777d5cb21e5cfbf51673ad238b03abd51dfd63a34540c8b241561ece691c1d4b4b9336e46f7bc906bcb6892aa0c90740040996ef152322cdad4752c4089e91c7355e11d22f14006900000000000000000000000000000000000c008c00677265300000000000000008006a00", @ANYRES32=r0], 0x1a0}, 0x1, 0x0, 0x0, 0xc000}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xffffffff) 18:06:06 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000140)={0x7, 0x1, 0x1}) 18:06:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8002, 0x0) 18:06:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{}, 'port0\x00'}) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003000)) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x25, 0x501000) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000001c0)) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) 18:06:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r3, r2, 0x0, 0x11, &(0x7f00000002c0)='posix_acl_access\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0xb, &(0x7f0000000280)='/dev/mixer\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r2, 0x0, 0x3, &(0x7f00000001c0)='\xda[\x00'}, 0x30) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r1, &(0x7f0000000240)={r2, r0, 0xf3}) r6 = inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x2000000) inotify_rm_watch(r2, r6) 18:06:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:06 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd87}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) sendto$inet6(r0, &(0x7f0000000140)="5fb88c7501", 0x5, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x2c) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r4, 0x6}, 0x8) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 815.082551] audit: type=1400 audit(1562090766.462:156): avc: denied { map } for pid=12205 comm="syz-executor.3" path="/dev/nullb0" dev="devtmpfs" ino=1218 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 18:06:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xff, &(0x7f0000000140)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:06 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffff, 0x0, 0x800, 0x0, 0x0, 0x3], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:06 executing program 3: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x4, 0x7, 0xff, 0x0, 0xc}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4009}) r4 = socket$kcm(0x29, 0xfffffffffffffffa, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000c00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 18:06:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000f40)=ANY=[@ANYBLOB="e0010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f00000001c0)=0x40) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000900)={"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"}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000480)={0xb, "a4c0c34b191aa531179f8d9268a2392f04bcadf0851cf7930467ffefb11dd145039b67cc7f50685705c429b2549606ba31015e4ec6fbd995749f042c6c9857710fcaa6da72c0c7de5c44601e38710b03ba45a21b01652eb0cd3e0a1152de854ca5e2aec8db7da9458b7ada6ef98c3c45eee050b492efecbf0da5377f8ab13e36"}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000680)={'filter\x00', 0x6d, "624b58fc5b69812c1b8e849ce6416f64278d7aa6162abf4d5aa8ad27e990bdad3e33edbc83171fd5130190b4c7d7d1b591ca4da3262381789cbaea467f94ebe82617bda10a8e2fa85175991073b5cc101a329d9c3fe7f022843dfc1fbd55be74d8d5942418c993e451b2ac199c"}, &(0x7f0000000300)=0x91) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x608, 0xffffffffffffffff, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:06:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8003, 0x0) 18:06:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x5, &(0x7f0000000300)=[{&(0x7f0000000180)="85532e41b7aab013eea1efe1275e002541150a1d9e44f4f8a77872c66d168e70ff063a9e33237a4908908c06915d3dcb9d", 0x31, 0xf53}, {&(0x7f00000001c0)="c924766cac6b", 0x6, 0x1}, {&(0x7f0000000200)="42a0e82d561491cee9db009bf60c4ad6", 0x10, 0x401}, {&(0x7f0000000240)="3a4a2e1dc0aabaeb71302d896a017c89a2877a9e95d9c63bc964f85b54b146e0c4d6daa21260ec0dd8a64be54891cf6d91127a06755baceea49b33a1856a8dcb84be474ed75da8c3eb8f3cf3ab930cb41f5c7af0f82c05026b68cd789f997d11c396b29e4633a36db0a0355a677f2404656497bf8211a40d3406eb", 0x7b, 0x4c2}, {&(0x7f00000002c0)="f1662546bccd84eeb411f0ba48dcda19993fdaf350786b4b15cbada27e83e53d048c24eb3bad5440d33d042d4e957f48fe69cbc3476eb7", 0x37, 0x6}], 0x80, &(0x7f0000000580)={[{@overriderock='overriderockperm'}, {@session={'session', 0x3d, 0x50}}], [{@uid_lt={'uid<', r1}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/timer\x00'}}, {@subj_user={'subj_user', 0x3d, '!'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0xffffdfffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1, 0x2}}) 18:06:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/31, 0x1f}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000110) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000000)={r1, r1, 0x8cc6}) r3 = syz_open_pts(r2, 0x4) r4 = dup3(r3, r1, 0x20000000000000) write(r2, &(0x7f0000c34fff), 0xffffff0b) r5 = semget$private(0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r5, &(0x7f0000000080)=[{0x3, 0x0, 0x800}, {0x3, 0x2400000000000, 0x1800}, {0x6, 0x9, 0x800}, {0x1, 0x6, 0x800}, {0x3, 0xff, 0x1000}], 0x5, &(0x7f0000000180)={r6, r7+10000000}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000001c0)={0xa, &(0x7f0000000300)=[{0x100, 0x100000001, 0x2, 0x1}, {0x4d22, 0x401, 0x40, 0xfff}, {0x0, 0x8, 0x1, 0x8}, {0xbb8, 0x2, 0x6, 0x80000000}, {0x3, 0x6, 0x100000000, 0x2}, {0x1f, 0x9, 0x101, 0x6}, {0x1, 0x6, 0x6, 0xffffffffffff8d50}, {0x81, 0x6, 0x543d, 0xcf1}, {0x1000, 0x7, 0x2, 0x8}, {0x5, 0x1d8e, 0x1, 0xac50}]}) 18:06:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x0, 0x1, 0x0, 0x3}}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x31, 0x1}, &(0x7f0000000140)=0x0) timer_delete(r2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:07 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x10100b, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2000022, &(0x7f00000001c0)={[{@prjquota='prjquota'}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9803, 0x0) 18:06:07 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x20000, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000580)=r2) getsockname$ax25(r1, &(0x7f0000000600)={{0x3, @default}, [@default, @remote, @rose, @default, @bcast, @netrom, @null, @bcast]}, &(0x7f0000000080)=0x48) r3 = semget(0x2, 0x0, 0x12) semop(r3, &(0x7f00000000c0)=[{0x1, 0x9, 0x800}], 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="5802375487eb6d00007c2dc87fa264d2d9d1ae9bf27eb0acdd73f484522c6406b7fe73c8137d1607719013ec94f2b6e0db0a5dbda3b5", @ANYRES16=r4, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$eventfd(r0, &(0x7f0000000280)=0x101, 0x8) [ 815.996257] Unknown ioctl 35298 [ 816.030440] Unknown ioctl 35298 18:06:07 executing program 3: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x7}, {0xa, 0x0, 0x0, @remote}}, 0x5c) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) accept4$nfc_llcp(r0, 0x0, &(0x7f0000000040), 0x80000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="636dcb050000c7858d2e5000ff"], 0x1}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001fde), 0x4) 18:06:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:07 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000001c0)=0xfffffffffffffffc, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r1, 0x1f, 0x1, 0x80000000, &(0x7f0000000140)=[0x0], 0x1}, 0x20) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000002c0)={{0x3, 0x0, 0x83b9, 0x3, 0x5}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x200000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) 18:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xbc00, 0x0) 18:06:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/31, 0x1f}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000110) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000000)={r1, r1, 0x8cc6}) r3 = syz_open_pts(r2, 0x4) r4 = dup3(r3, r1, 0x20000000000000) write(r2, &(0x7f0000c34fff), 0xffffff0b) r5 = semget$private(0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r5, &(0x7f0000000080)=[{0x3, 0x0, 0x800}, {0x3, 0x2400000000000, 0x1800}, {0x6, 0x9, 0x800}, {0x1, 0x6, 0x800}, {0x3, 0xff, 0x1000}], 0x5, &(0x7f0000000180)={r6, r7+10000000}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000001c0)={0xa, &(0x7f0000000300)=[{0x100, 0x100000001, 0x2, 0x1}, {0x4d22, 0x401, 0x40, 0xfff}, {0x0, 0x8, 0x1, 0x8}, {0xbb8, 0x2, 0x6, 0x80000000}, {0x3, 0x6, 0x100000000, 0x2}, {0x1f, 0x9, 0x101, 0x6}, {0x1, 0x6, 0x6, 0xffffffffffff8d50}, {0x81, 0x6, 0x543d, 0xcf1}, {0x1000, 0x7, 0x2, 0x8}, {0x5, 0x1d8e, 0x1, 0xac50}]}) 18:06:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 816.378575] EXT4-fs (sda1): Project quota feature not enabled. Cannot enable project quota enforcement. 18:06:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc400, 0x0) 18:06:07 executing program 5: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) fcntl$getflags(r2, 0x401) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:06:07 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x5144, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\xff', 0x1ff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180), 0x8) r3 = socket$inet_dccp(0x2, 0x6, 0x0) mount$fuse(0x20000000, &(0x7f0000000280)='./file0\x00', 0x0, 0x7a04, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000680)='/dev/midi#\x00', 0x86, 0x400000) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000400)={0x6, {{0x2, 0x4e23, @empty}}, 0x0, 0x2, [{{0x2, 0x4e21, @rand_addr=0x81}}, {{0x2, 0x4e22, @broadcast}}]}, 0x190) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x7) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f00000001c0)={0x5, 0x2, 0x7, 0x1}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5d00000000e42e9f4e922526894d504d9fc481105a318b855052e341a5d117294e11873fe9827a2bcb4899e749070000001927a6733e7a78cbb7fb3c25f4fe61df3940a5829afd711f8d04295649fb91be7df4ab225b9c92f5ae11bf6e18b597fd10f29b53f0a23ae141ef66b8fe307025a1739d61b6", @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf2501000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x408c1}, 0xff5845f126545e3f) ioctl$UI_DEV_DESTROY(r0, 0x5502) 18:06:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/31, 0x1f}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000110) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000000)={r1, r1, 0x8cc6}) r3 = syz_open_pts(r2, 0x4) r4 = dup3(r3, r1, 0x20000000000000) write(r2, &(0x7f0000c34fff), 0xffffff0b) r5 = semget$private(0x0, 0x0, 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r5, &(0x7f0000000080)=[{0x3, 0x0, 0x800}, {0x3, 0x2400000000000, 0x1800}, {0x6, 0x9, 0x800}, {0x1, 0x6, 0x800}, {0x3, 0xff, 0x1000}], 0x5, &(0x7f0000000180)={r6, r7+10000000}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000001c0)={0xa, &(0x7f0000000300)=[{0x100, 0x100000001, 0x2, 0x1}, {0x4d22, 0x401, 0x40, 0xfff}, {0x0, 0x8, 0x1, 0x8}, {0xbb8, 0x2, 0x6, 0x80000000}, {0x3, 0x6, 0x100000000, 0x2}, {0x1f, 0x9, 0x101, 0x6}, {0x1, 0x6, 0x6, 0xffffffffffff8d50}, {0x81, 0x6, 0x543d, 0xcf1}, {0x1000, 0x7, 0x2, 0x8}, {0x5, 0x1d8e, 0x1, 0xac50}]}) 18:06:08 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x2002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 18:06:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20000002812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0xa07000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x2, 0x101) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000080)=""/28) 18:06:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x9, 0x440000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r3 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000001c0)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000340)=0xfff, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000240)=""/217}) 18:06:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x200002, 0x66) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xffffffffffffff81, 0x6, 0x7, 0x8085, 0x4, 0x658f, 0x3ff, {0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x9, 0x100000000, 0x4, 0x2}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={r2, 0x8}, &(0x7f0000000340)=0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0xffffffdc) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000000c0)={0x81, 0x3, {0x0, 0x0, 0xfffffffffffffff9, 0x3, 0xffffffff}}) 18:06:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xd003, 0x0) [ 816.928501] audit: type=1400 audit(1562090768.312:157): avc: denied { map } for pid=12949 comm="syz-executor.4" path="/root/syzkaller-testdir504868598/syzkaller.aT51Dt/1239/bus" dev="sda1" ino=17767 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 817.073946] mkiss: ax0: crc mode is auto. 18:06:08 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc99], 0x102000}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x4, @tick=0x80000001, 0xafc9, {0x2656, 0x6}, 0xfffffffffffff1b6, 0x3, 0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000380)=""/171) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:06:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 18:06:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 817.239847] mkiss: ax0: crc mode is auto. 18:06:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0xffffffffffffffff}}) 18:06:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:08 executing program 3: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2383, 0x100) ioctl$BLKROGET(r0, 0x125e, &(0x7f00000000c0)) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x6, "33308466156af368d0448e4d9567289bdbd262e7a3877dcf772de0b14c6aacc4", 0x4, 0x200, 0x1000, 0x6, 0x10, 0x2, 0x1, 0x6}) sendmsg$sock(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="d1ae7f2e86d1ac8bb9772ef2c0cea8a988a8dcbbc749695c65d80d4b0a8406cee18cc76ac2cfcf76e027e389046ad392affd7040aef6afd335365cbf338a030e16f61d7996af23db74c7b8b0b9f7af328451781b", 0x54}, {&(0x7f0000000180)="670ee49a84bee36b65e874171b34c751e403773bd32cf50afbe979cb837a720d0538c9be881f09046e760cfecb758a4ee569380272f99f7e2a3f594bf3e1cc8b1a46fd4df20d9b47a9218aa9b361a88aec04dd0697f550eed9f57ee7950b7c0cb9f6c073e5f0a97345eff27eca01f178c3dfe13d37a10adccb391be5d3f7a271eacb41", 0x83}, {&(0x7f0000000280)="5514d17124f95441f07461077cfaa7364b7323ff35a6672511c009c5c186793457755b8498766ad9f2924ac1b3143538f70c0dd4c3d00e62b9f57bbcf2353542167c4b081dc61789", 0x48}, {&(0x7f0000000380)="2e9eadf375e2a3d19653b8a710a1eadc8c98d8657708f07c0d4533179e68434a2d35e54760238ecbe7f59e162a677ce733da87fa19b72422b057550808f4901abf5cabbb75dbd4e12721703fdea45f03cdd4a7dd71b4697b70b0c0b27d980f56012832d46eb28037c1ce83141fb2e02be9ade9b1c9958eb73b444d9f3f50c6713d146f243087c3d1c2dd33139577f65543a86a9510cb13dd5628abbadf8fa47b47f25b2c977cdddb72a33eba07601bc743d7ae116d3262ecda789dda46eb42faf8", 0xc1}, {&(0x7f0000000300)="d8f53a79872524c3a5ec4fcfcda1012a080b179c9d99af65f6e95c5d210f1f393e6787fac299036ad2a9362197571b3cd114c96ff5774b4e", 0x38}], 0x6, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x20004000) 18:06:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xd402, 0x0) 18:06:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x6) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:09 executing program 5: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x8893, 0x400040) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000200)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x800000000000002, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x3, 0xc99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x102000}) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r6, 0x127d, &(0x7f0000000180)=0x3) ioctl$KVM_NMI(r5, 0xae9a) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) setsockopt$inet6_udp_int(r6, 0x11, 0xb, &(0x7f0000000240)=0x5, 0x4) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:06:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:09 executing program 1: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="4c706d9830cffa8c7cbd18cc085ea10f6cedb44c060fb561b5b3419ae3b509ab331007d324ff3814c93b85c903e803c16ecc5b8cbef7c57c225cf9ec510c38f4970d28b063b224234e457c8515b1a0aa41e0eb73371fbe864264e842d1731543c1fe1394a34f1a6dd1c402ad906024e09909773dcd48d4b0521980683a4f4a59b136469856da22378b1b7aea1cf18e53a3e100ab10de1a59d31078714500e824ed252e98676645a11b54ee60bf540c7180666b4d7b19b27214c6e1b2d3855c54f3b6a537ca2e0e9267c227734e2e39a34a3baf37175ef3672c761e38eca94a3f534cd83417f3ede52af59878ad186e6c42", 0xf1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000400)={r0, 0xb5, 0x8e}, &(0x7f0000000440)={'enc=', 'raw', ' hash=', {'sha1-ce\x00'}}, &(0x7f00000004c0)="698c118e0d836bc2a2d01594559d9056c32e67a56ece32363310c77fe662122b8561a289f05fc682d30f857cc8509c0b4e6af287c68c96a9f9fecf76b889bff58c5c06fa6abfd3291bc7f69d6b5939c0139e04729b43fa5853f08be49a7b8f5adb2e01c8364b10328a6c50e1e790d3c63ca4b86ae6e871a3d79a2b6bca0f0e3ed34af173556ee22497f98b32226af1be20afdd0f38400691377d51da52017a02cba48986cc6f50a274cf5bdff2b8d4eb9b5ce6daf3", &(0x7f0000000580)="ba1e980b5e22e8dbce84aa4b0108c7786bb0f590ca95401835ea95ad791dd6eea0a5b8867619acc07037f69b1f23321952ce7163204fd4eef49d32e610ea847161bd67191b27f78e9c5aa2eda5bb69993662230dd8dc352954782687af7561c5dd8d88b0a78646a843cc3f687938b267861255ca03b2102b287d8adbcf40eabe9ef25d2e9509c599eae43f01efd6") r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f0000000680)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000006c0)=r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000240)) ioctl(r3, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r5 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r6 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x81, 0x2000) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x3}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) r7 = msgget(0x1, 0x80) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000140)=""/103) 18:06:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe000, 0x0) 18:06:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe203, 0x0) 18:06:09 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f45344600000000da010000ffffffff00380200026a873ea5e426ce9fa7351d52846889aec5e4224028e8f12c8f4891c82e2db10bfc8c46a7c6"], 0x44) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r0}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:06:09 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f00000002c0)='./file0\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x7, 0x73) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x40, 0xecaf, 0x3ff, 0x7, 0x6, 0x8001}) getsockopt(r1, 0x1, 0x7, &(0x7f00000001c0)=""/135, &(0x7f0000000280)=0x87) fcntl$dupfd(r1, 0x406, r1) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000380)=""/26) read(r2, &(0x7f00000000c0)=""/244, 0xf4) 18:06:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x307}, "46dd7270b5bf3d0a", "a0d6b034cef8110041164c001465a8a1b956841e73762ab3b7bd06c09bf32ab5", "5f67b31b", "75fa048f0e28b734"}, 0x38) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='y'], 0x1) 18:06:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x400000000000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'nr0\x01\x01\x00\x00\x00>\xb1\xef\x1e\x12\x8e9(', 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fee000/0x11000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000000)="325d6f88e38d06fdede6cb7643", 0xd, r0}, 0x68) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 18:06:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xec03, 0x0) 18:06:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80040, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000140)=""/38) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:10 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:10 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x9) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fsync(r1) r3 = accept(r2, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) sendmmsg$alg(r3, &(0x7f0000003280)=[{0x0, 0x0, &(0x7f0000000040)}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e23, @remote}}) recvfrom$unix(r3, 0x0, 0x208, 0x0, 0x0, 0xfc8b) 18:06:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xedc0, 0x0) 18:06:10 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) syz_read_part_table(0x3, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="25dee9d46650bc13e2c2607f7851ca137c115579db7c04ff1dc00e3b20d51b0b4b2904c0ac61927d482eccbf7aa46f584450af24f6b57f4b8d07ef9f9097a6ceb2897402f05c5a6b7cca630fe733d8a3c8e7f5a7432133052c345fe7f30db9f629d8a6007e394702dfd1974a08d2377abec0", 0x72, 0x8}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000240)={r2, 0x3}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7d, 0x0, [0x0, 0x0, 0x140], [0xc1]}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCLINUX2(r6, 0x541c, &(0x7f0000000140)={0x2, 0x8, 0x8, 0x3, 0x401, 0x1}) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000180)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 18:06:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:10 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:10 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x8000) accept$packet(0xffffffffffffff9c, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001680)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000016c0)={r1, 0x1, 0x6, @broadcast}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x6}, 0x8) 18:06:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf003, 0x0) 18:06:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000340)=0xe8) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x1000, 0x903}, {0x2, 0x6}], r1}, 0x18, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6) write$UHID_INPUT2(r2, &(0x7f0000000140)={0xc, 0x4a, "88a969c116029940cb01dbf39900c4977d13f6a7ea9568441410cbc6c9d0b625b742282712d2aae9743f15aac4d7df51f89e62db4e945995950be2031c9fd1be8da81ad91b518d441c1a"}, 0x50) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:11 executing program 4: r0 = syz_open_dev$mice(0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000100000000000400000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f0000001000)=0x8000000000000000, 0xffff) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)={0x5, 0x22b, 0x3f, {0x77359400}, {0x0, 0x7530}, {0x0, 0x7fff, 0x1, 0x17}, 0x1, @canfd={{0x4, 0xf089, 0x7fffffff, 0x80000000}, 0x2d, 0x1, 0x0, 0x0, "ed0918754846a49d864a8e3dc0631b2fbfce6569b6fc1b6b137db970f9a6d1e67951cb816f500aca24541c557750d32fecc1741a827e2ebbe0403d96379e28ce"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x7fff, 0x7, 0x400, 0x2, 0x6, 0x100}}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) getresuid(0x0, 0x0, 0x0) 18:06:11 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xff0f, 0x0) 18:06:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x100000000, {{0x2, 0x4e24, @loopback}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 18:06:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x3}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101000, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) 18:06:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fsync(r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x802, 0x70bd26, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x1f, 0x101, 0x0, 0x3}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000140)=""/67) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000001c0)={0x6, 0x1, @start={0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:11 executing program 2: r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 819.999466] audit: type=1400 audit(1562090771.372:158): avc: denied { map } for pid=14114 comm="syz-executor.4" path=2F6D656D66643A0B656D31C1F8A68D4EC0A35CE2CBA2BAE5F497AC232AFF202864656C6574656429 dev="tmpfs" ino=193436 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 18:06:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) 18:06:11 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x100000000, {{0x2, 0x4e24, @loopback}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 18:06:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000b518000500000000100000040000000200000000000000001000003f0000000000000003000000000000000700000000000000000000000080ff10010012250000d9a161dd64970cb3e56bd64c23f30253e4a88ac7693f6212e7b313417a54e2a5dc88b382073b692121604eddcab294d95feba0c72af25b4dd9554b4d69d1a27623b8ed6c45fe2abc76e85a8af3f60bfffbffff9c5dbddeb94fed3938ef51c4057078e1ce390c35f96d586f8bd5a66f632f95a547ca65e3ac7b2763efc721c9e9006333a30618f295074b7441e1bad736275a5a8968444b538d92656e8b2564e6483ace09faa777059d83cfb4f2c1c646a900c700"]}) dup2(r0, r1) 18:06:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x4000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6, 0x12a02) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000140)=0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000002c0)={{0x3, 0x6, 0x0, 0x0, 0x4}}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x10080, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000240)={0x3f, 0x27, "a3b585655cebdfce84b137a87479c6b84aa8e31683eb2dbfaf1c61d0bff4d801ab347a74cb111f"}) 18:06:11 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)={{0x107, 0x1, 0x8f24, 0x3c4, 0x208, 0xbeea, 0x31b, 0x40}, "0887039e68a44960cd3e3c7603da1e94d8199ac5ad129efb14d5bb3e8cc5f2e7806e0d5c15b0fc10fcb7a302cfc562cd1e49c27960166bdb2b677592df8129a4c7b81168276f5f47ba50dd2988d1ef3d03aa80a82e1d2253251dcb8a657acbb6", [[], [], [], [], [], [], [], []]}, 0x880) r2 = msgget$private(0x0, 0x1a) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000a40)=""/19) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x10000, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000180)=0x2, 0x4) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000140)={0x401, 0x3, 0x0, 0xffffffff}) 18:06:11 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x100000000, {{0x2, 0x4e24, @loopback}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) 18:06:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') getsockname(0xffffffffffffffff, &(0x7f0000000c80)=@nl=@proc, &(0x7f0000000d00)=0x80) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100), 0xc, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x400000000003, 0x80000000002, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000b80)=0xc) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000440)="22982314ca0fc9fb59c4f5c563ebf0ceb79c785deaaff35d100e714cd9620a89e92ac7421b114e38a6ab777b75acc399b3870550d11682936fef23c461fce17a63473b755c6e07d4f62c0b21fbafdb030cde458618815548107f5f25e203a0127ea65398d760b5d57c9014b6f78a24d2ce94759cb6a62e861a0e7f2747327d259da5ba2c19e6021f821becfaaf5be1ec78b48a55231ec29c8b14751f1954acf0439351e2db2cf31fc5ea", 0xaa, 0x9}, {&(0x7f0000000500)="f3726c81a99122b687bfa82bd0ddf841d4da33c5baa4985c8ac2a77bdb361b6abbca6ec1fa84cc3eb0f42f58fde5d2ce9d348fe6af9946e5d98e5e572df0a5822e130e317b7a5476ee93920997c5c1bd19d2befb46e48ad3bfb8ea5bf74d893822de7dc61c1be41f8dbb2d8b3f2bac73c9f7c69a026803dcb8cc731eb8a2cdf90d6e70c917615dbac2dcf64c60fcd9687ca13b", 0x93, 0x98f}, {&(0x7f00000005c0)="a2c6ad6153a422364dbc98476d26b86d4a7d0dcb934f0dc00384a3802a036a02d467dae83c2e09127626bbc2138876d02b85b0322c814f9b1204d23e02827a2cda07ed07e41c3e009a1561fc6fcfa08be4946f80f0f476457f117955c60af8783f4db86d85ac2fb5823f6c2ebcdccc82413a87d9f29d29f892ecacaa7eca689ab66a959f92b9ed15a8ddd04cdb87adeb5418eaa4c8ff672f53f4571456639288938a1a9803183b61d6fd35acfa574757912449894705a338c6ee9665a96ac9", 0xbf, 0xeb}, {&(0x7f0000000740)="d94af85ee51cd0a3321c9232c95683649feb98124f8173343ff2aca6353385e222a175198e357dc2d6fa7ad365c5157556a31ec3fa4648f86f3600de481cb90c48bcdaba0c48a53469c45ed0761db4eb32a6818d0cd111a83c011985287efe011e139215cc0365748bbd91a12a583f574b1cd2323d88353a69df0cb583fe98d22e82f3f502637e5b", 0x88, 0x6}, {&(0x7f0000000800)="45d590426c1e6b7f7b8ff172b5060975cc8d8f90d97aa80e998abdf30b055d0ce58affd081e4b366f05410cffd75a844577eacfb2cd1c5fde6bf54104fcbaba0ef342af8bd468ae28ed8cccd74f9eb1e2accde08cd336fb73f79d61e6b7bde452f819ce76f0159e094722518bbf5c9af355b7d76550dd43aa72a33f4255924d8b62036d4bb0660f707bf", 0x8a, 0x100000000}, {&(0x7f00000008c0)="9b8c41a87f59070e90e1351ce21e29087a0477e6636d6859288de1964090cacd92b15604dd0eba2d50d29d43639e961c7c92a5673ff3bea2e73d4e3c39cfcf52343cbb97103d55afcb114bc3806704fbcc5f88ebbc084284cb0012f370a0b506dfae288ae93113d15caef11b2eb7ec9f1449b741222122549fa2cd9f77d7026ed7af93d6d9caf99cbc060414c97950310fbadce5aae30065a630390f6f830c45c1e30a5b8392760443fb7ec544575b50ebfdae4cf2d7eead5cf46b09ab3a059627688de616c723474cbd6970319e3b4534cfd82ce8f78c3144a317ab94c7", 0xde, 0x8367}, {&(0x7f00000009c0)="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", 0xfe, 0xb9}, {&(0x7f0000000680)="6fb056b1be31339ef774b39e753fee1d34f9ba1d5c2e46210f9e3180356eaa8caec93a25422318ec1e398c7c33868205562662a813a9ea028c22723ea1ff56", 0x3f, 0x1000}], 0x4, &(0x7f0000000bc0)={[], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, ','}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@euid_eq={'euid', 0x3d, r3}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure='dont_measure'}, {@subj_user={'subj_user'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:06:11 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, 0x0) 18:06:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") times(&(0x7f0000000080)) r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x100000000, {{0x2, 0x4e24, @loopback}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x8) [ 820.689884] jfs: Unrecognized mount option "fsmagic=0x0000000000000007" or missing value 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x0, 0x2}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x570, 0x140, 0x0, 0x140, 0x488, 0x488, 0x488, 0x4, &(0x7f0000000080), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x1440, 0x3ff, 0xc6, 0x9, 0x5, 0x100, 'ip6erspan0\x00', 'nr0\x00', {0xff}, {0xff}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="76fa46732a38", @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, @empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}, @mac=@local, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0xa0000000000, 0x8, 0x9, 0x1, 0x7, 0x2, 'hwsim0\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x2fc}, 0xf0, 0x218}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:sshd_exec_t:s0\x00'}}}, {{@arp={@broadcast, @empty, 0x0, 0x0, @mac=@broadcast, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @mac=@random="bcc09c85647d", {[0xff, 0xff]}, 0x4, 0x1, 0x7, 0x6, 0x8, 0x8001, 'nr0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x0, 0x2e}, 0xf0, 0x130}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "885928ec2b9cf4be3fef49cceaa5f7fae7b6fce797dab14598376d1372aa"}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x5c0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40000, 0x0) 18:06:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000300)="b8006000000f23c80f21f835000010000f23f80f204266b823010f00d00f01c49a00000000ad00670f01d10f017c385c360f21ba670f79607a66660fc7b101280000", 0x42}], 0x1, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000000000000700000000000c79440721eade872906ca5c"]) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x842, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4cc]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000002c0)) 18:06:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fffffff, 0x8001) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xe0000, 0x0) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000280)={0x100000000, {{0x2, 0x4e24, @loopback}}}, 0x88) 18:06:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0700000010000000fbffffff5a725742", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r3/1000+30000, @ANYBLOB="000000a001000000010000e0340100000a8d0ed6e184bffc4a6e4e98c85eb0d9b4b3141bb6b2c20afcd3d07f993c600fa9680b9ca77613293b7dcaba82a09c1664a742d411339a6b2719fc14e43f6a7e"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044051) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r5 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 4: getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) shmget(0x3, 0x3000, 0x54001000, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='sockfs\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x428) request_key(0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x2) sendto$isdn(r1, &(0x7f0000000040)={0x5, 0x1, "0610ed21a618"}, 0xe, 0x20000040, &(0x7f0000000080)={0x22, 0x10000, 0x8000, 0x84f7, 0x4}, 0x6) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000140)={0x3ff, 0x3, 0x3ff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000180)={0x0, 0x102, 0x8000000, {0x493e324d, 0x1f, 0xd, 0xd3}}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1fffff, 0x0) 18:06:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x8013, r0, 0xfffffffffffffffd) r1 = socket$xdp(0x2c, 0x3, 0x0) write$smack_current(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x9) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/21, 0x3c000, 0x800}, 0x18) 18:06:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:12 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:12 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 821.555627] sctp: [Deprecated]: syz-executor.1 (pid 14859) Use of int in max_burst socket option. [ 821.555627] Use struct sctp_assoc_value instead 18:06:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045569, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x600, [@bcast, @bcast, @rose, @null, @null, @rose]}, 0x40) [ 821.620410] sctp: [Deprecated]: syz-executor.1 (pid 14859) Use of int in max_burst socket option. [ 821.620410] Use struct sctp_assoc_value instead 18:06:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r4, 0x34}) fcntl$setstatus(r3, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) setsockopt$inet_buf(r2, 0x0, 0x2f, &(0x7f0000000500)="33f190b1afbfbb8f44def565f7be4a6493f4b0e97ad5461a3279987b450865d1b92a78adbecaa1f9f536cdb3ace72cabdf11677f09d54f2a999729f0cc68ab59a4db75289b7ce46f2ed712816aaf056c4b06d16527ef3276539a012273ea59f81bf54ffe131ce83107286283997671aab50017240c0559d60ffeb4704fe260ae158170debbbbeaa9b3c64cee8bd6c104c1a9fdf3a230437fafcd7afa0d0b7b868a6e001b3afc70312c4365692458050103b458d354cf96bf829586cd3082fd31ec101c", 0xc3) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x400000, 0x0) 18:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dcc6e070c441317c9a0e9295a4bb68470314ceefec374afe54f38df7aa0298ea368555") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:13 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x490000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) syz_emit_ethernet(0x140, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0704000100000800420000247c10ed450b88b10000000000009078ac1414bbac1414aa000000000400907801"], 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$TCSETXF(r1, 0x5434, &(0x7f0000000080)={0x6, 0x7, [0xb6, 0x7fffffff, 0x479, 0x4800, 0x5a42], 0x8}) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x40) 18:06:13 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) fcntl$setstatus(r2, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 821.968171] XFS (loop0): Invalid superblock magic number 18:06:13 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x4e24, @empty}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 18:06:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000001, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r1, 0x8, r2) 18:06:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) fcntl$setstatus(r2, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6b6b6b, 0x0) 18:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:13 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:13 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) fcntl$setstatus(r2, 0x4, 0x2000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x440, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x1a, "927774837d4a017108bb580dcf68524d9c6ba5ced2c1c55051aa"}, &(0x7f0000000180)=0x22) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000001c0)=r3, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x33e, 0x200007ff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r0, 0x1, 0x2f, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000200)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @remote}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, 0x0, 0x1f4, 0x0, [0x9c00, 0x0, 0xa8, 0x0, 0x8400000000000000]}}, 0x20) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4) time(&(0x7f0000000100)) 18:06:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:13 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0xa002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="04000000000000000900000002000000000000000000000002000000e008000045090000000000000003000000000000000000000000000041d400000100000000000000000000009f080000000000000200000000000000000100000000000002000000a032000001ee01000100000000000000000000000008000002000000000000000000000000000000000000000000000000000000010000000300000000000000000000000100"/200]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl(r2, 0x8dd9, &(0x7f00000002c0)="e807ab9aae") ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000280)=0x4) 18:06:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x989680, 0x0) 18:06:13 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:14 executing program 2: openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x1, 0x40, 0x6}}) 18:06:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 4: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x501040, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_DQEVENT(r0, 0x5646, 0x0) 18:06:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1000000, 0x0) 18:06:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x280000000000001}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x2, 0x1}}) r4 = msgget(0x3, 0x2) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000280)=""/238) 18:06:14 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 823.046296] XFS (loop0): Invalid superblock magic number 18:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 1: ioctl(0xffffffffffffffff, 0x1000008916, &(0x7f0000000000)="0000f4ff00000000000000") r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x81, 0x24}}) 18:06:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000c0, 0x0) 18:06:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f00000001c0)={r3, 0x34}) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:14 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x2, r0) 18:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:14 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 823.434066] XFS (loop0): Invalid superblock magic number 18:06:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0x1}}, 0x3ff, 0x2, 0x60000000, 0x0, 0xd0}, 0x98) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x0, 0x1, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:14 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x301, r0) 18:06:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125d, r0) 18:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x40001) r2 = dup(r1) ioctl$KDSETMODE(r2, 0x4b3a, 0x9c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2000000, 0x0) 18:06:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:15 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125e, r0) 18:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) tee(r1, r1, 0x7, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:15 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125f, r0) 18:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x0, 0x80000}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x468040, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x9, 0x2, 0x3, {0xe, @raw_data="a37e45fef041e4b8802f3f557a6eec0d223b3c4ffadbd20dd3980d3e91c2a6b2de578f8f925d65c5f0a14efe97eded750988a1492116b6ed8ab4e3dfbeb6f7f6935fec0d739620c2a85ecc912212cac593ebbb654524934ec6543c7fd77ed7bb4a9dbd3532c8125e1cf5f544dfe5e3ceaca28f2d9780653075402059619f8f935a482fb7775e8a6d4589796cdcbc0fc806ee5aea8c8551bd5a8292c9511418d1ecc17799560086b98ea1a8304e70a7695c44b9293030e7735e5d6bc837ed53d7898fef17c2665af4"}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) [ 824.188526] XFS (loop0): Invalid superblock magic number 18:06:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1260, r0) 18:06:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3000000, 0x0) 18:06:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x8000) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xc0000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000140)=""/1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, 0x0, 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:15 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1261, r0) 18:06:15 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x20, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 824.614833] XFS (loop0): Invalid superblock magic number 18:06:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4000000, 0x0) 18:06:16 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1262, r0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r2 = dup(r0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x2, 0x8000}) 18:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:16 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1263, r0) 18:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) lseek(r1, 0x10, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = semget$private(0x0, 0x3, 0x290) semop(r2, &(0x7f0000000080)=[{0x2, 0xfffffffffffffffe, 0x1800}, {0x0, 0x1}, {0x3, 0x200, 0x1000}, {0x1, 0x5}, {0x3, 0x7}], 0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:16 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1261, r0) [ 825.039301] XFS (loop0): Invalid superblock magic number 18:06:16 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1264, r0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = dup(r1) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x1f) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e23, 0x401, @rand_addr="f92bbf89c2cdc93dd298698f3989b0b2", 0x6}, {0xa, 0x4e21, 0xa25, @loopback, 0x71}, 0x3, [0x8, 0x9, 0x40, 0xfffffffffffffff8, 0x5, 0x2, 0x9, 0xffffffffffffffe1]}, 0x5c) 18:06:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0) 18:06:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1261, r0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f0000000140)=0xe, 0x80000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180)={0x401, 0x6, 0x2}, 0x6) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:16 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1265, r0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x21b, 0x4001) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x9, 0xf, 0x4, 0x20000000, {0x77359400}, {0x2, 0xc, 0x80000001, 0x9caf, 0x2ad8, 0x100, "e7b3ad5f"}, 0x40, 0x3, @planes=&(0x7f00000000c0)={0x0, 0x80000001, @mem_offset=0x4, 0xfd11}, 0x4}) r2 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1, 0x23}}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=0xc9d7) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000380)={0x2, "567605f45e723288cc632383d95a1cea5bcdbedc7a140add01c071e0a56c3b16", 0x1, 0x1000, 0x0, 0x4, 0x11, 0x1e6b4cab3d7d11f5, 0x1, 0x480c7cc2}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r4, 0x6}}, 0x10) 18:06:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1) r2 = getpgid(0x0) prlimit64(r2, 0x8, &(0x7f0000000280)={0x1, 0x100000000}, &(0x7f00000002c0)) write$P9_RUNLINKAT(r1, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2332896170414fc593361f0000000000200001005bd28db006a924c955c39a4301000000edff0000000000000000"], 0x30) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c65300a39ff030000000000000510c842554f95b4fea71e2b00000000aff3605049337ab9371fc48b63b80661bc6f1c40d2bba7b5922e1d53f71284f7ce488bf97860fa62543474a9375490493491a2be592aa1c83234a36d98fbaad93f010b851d99765d53fc96a202091d71883b93d102256e965c3fb205e2bf878a14d7eaf8f00010000000000000e42a498883e99d20bc5d557ebd"], 0x24) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000000c0)={0x1ff, 0xffff}) 18:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:16 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1267, r0) 18:06:16 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x1}, 0x28, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x82000, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x13) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000001c0)=0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 825.493906] XFS (loop0): Invalid superblock magic number [ 825.514931] audit: type=1400 audit(1562090776.902:159): avc: denied { getrlimit } for pid=16060 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 18:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6000000, 0x0) 18:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(0x0, 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:17 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1268, r0) 18:06:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x2013, r1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x481) mmap(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r2, 0x0) 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) 18:06:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(0xfffffffffffffffe, 0x0, 0x1ffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000200)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r4, 0x2}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 825.801677] audit: type=1400 audit(1562090777.192:160): avc: denied { map } for pid=16187 comm="syz-executor.1" path="socket:[194992]" dev="sockfs" ino=194992 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 18:06:17 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1269, r0) 18:06:17 executing program 4: pipe2(&(0x7f0000000000), 0x4000) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x9, 0x8000018, r0, &(0x7f0000000140)='./control\x00') 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='system.advise\x00', &(0x7f0000000180)=""/59, 0x3b) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 825.933861] XFS (loop0): Invalid superblock magic number 18:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7000000, 0x0) 18:06:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:17 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1274, r0) 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") write$binfmt_elf32(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/1776], 0x6ec) r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x200000, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:17 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1276, r0) 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) fcntl$dupfd(r1, 0x406, r0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000000, 0x0) 18:06:17 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x2800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:17 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1277, r0) 18:06:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000140)=""/236) 18:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 826.665331] XFS (loop0): Invalid superblock magic number 18:06:18 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1278, r0) 18:06:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r2 = dup(r1) bind$vsock_dgram(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) r3 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) r5 = getgid() r6 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000006c0)=0xe8) fstat(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={0x0, r2, 0x0, 0xf, &(0x7f0000000ac0)='/dev/snd/timer\x00'}, 0x30) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpgrp(0x0) stat(&(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001240)={0x0, r2, 0x0, 0xf, &(0x7f0000001200)='/dev/snd/timer\x00'}, 0x30) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001280)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000001380)=0xe8) lstat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001480)=0x0) stat(&(0x7f00000014c0)='./file0\x00', &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001b40)={r0}) r21 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4}}, &(0x7f0000001700)=0xe8) fstat(r0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = fcntl$getown(r0, 0x9) lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)=0x0) sendmmsg$unix(r2, &(0x7f0000001a40)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000200)="ab3b0c2ce131ba8da58897bf5dbde5a0e56117d0612b5262141e59430c795ece21dba8e44a09146e115c3a0e62b8ce1f21e0ee172df6b5eb2b16c4a486b8013cb3fc0a93dba74680dd4e3fec00c58469c5672a6ed0323790eefccfe368682f7ccc0eb111052af7365afd95876678bf38a819dec52ffa8bacbc3b7ef14d0cdaf591e40f904cb46eca51a0c395926e55caef40fde58b97ae0609d67988f13f6e706a22842e4476cb02c63249f4fc6216327fa12ce321bca90ea3d63d7319b4fd4dd8052e8e93b9736f8071b0970ec98f2faf82f29a03ac0b4d50", 0xd9}, {&(0x7f0000000300)="e84872aacc9b49bc17fb78458eb22d4d45cd9c2ba1c5fbd6aa237fa62646dfdec5d977f76b08df52ea44b4f1cdf47dedf4c37fe40b5d768e5d6696cd86", 0x3d}, {&(0x7f0000000340)="bd28d56b0d6d97706d9fb99197596436824d25a8f2ae3208393321b69de44acf4c13cd151793727f811b0af3a5998963071de13a26a503cf80b315f8d561ca1ef9f9157e299beaa7fa755284e05fb86b8b0a8766e01fbce5eaad22a234b45042db379b79ab3738cf6b6a95e0327343e65fc4b08fcfefaa5d4991df2996af6619da3426f93688e5309eec472bc6057a57fa62fb3e8de9e85f752e7913a0d702631a0f70222b08051f4e182251748589b7a4557ad9bb3ab858b0baa709b4a84c26442a243a3d30481c5fe4eb20774df20bc1a60ca575cc2c8ded4c18640c7ae85535b4", 0xe2}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r0, r0, r2, r2]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0xc0}, {&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000008c0)="06eefe1c", 0x4}], 0x1, 0x0, 0x0, 0x20000800}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000009c0)="da8286049011bc77d59c66de5e9dec6161f6b562d67d352895e8e3c02adec74d3ffaee896c64d311355e68dbd948183b09cd351adac5df8cf276d7c47e4b0bbecbca050c1e84f8aa783ede9599f4147a3a15d3b30deaf4f7f1d5e34b2f1676c7fafb7103b84edf96566fe5b74be6dc9b01d7ae2e8b2367f3b33ba58184b9632ba37d087eaa1a73b5b8aeaa56", 0x8c}], 0x1, &(0x7f0000000cc0)=[@rights={{0x28, 0x1, 0x1, [r0, r2, r2, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r0, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x88, 0x4004000}, {&(0x7f0000000d80)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000e00)="b5ba18493e0fc6c8be6e50cc18d081d0", 0x10}, {&(0x7f0000000e40)="805b1fe8809b28088fa9023a1a89e71e42f49560f4dcc7874b08f12bb55a5d94e00073ed4790bfe70924e59cab0f9988617839a07753f35074d8399fafbbf852d0d8d69b740e1afa68281496ec471ba811911912bb932b9c606a", 0x5a}, {&(0x7f0000000ec0)="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", 0xfb}, {&(0x7f0000000fc0)="a5a7a9bff144787078b0a7f58c9315cd8b3d306247e2540afa250dbce35a9ee2de0351dd25140195643d40aa1b", 0x2d}, {&(0x7f0000001000)="008d306a8a63542f5e46071c3f69e9084c481e5d475be0748cc98fabc7610f24985186249da6ac21337f4fd8d746f5752268e177425bc65f896fee60", 0x3c}], 0x5, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}], 0xd0, 0x4000010}], 0x4, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0xef, @local, 0x4e22, 0x4, 'dh\x00', 0xc, 0x6, 0x7a}, 0x2c) 18:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80e0000, 0x0) 18:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) 18:06:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:18 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1279, r0) [ 826.901392] IPVS: set_ctl: invalid protocol: 239 172.20.20.170:20002 [ 826.950577] IPVS: set_ctl: invalid protocol: 239 172.20.20.170:20002 18:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000180)={0x4, 0x1, 0x158, 0x4, 0x3f}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9000000, 0x0) 18:06:18 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127a, r0) 18:06:18 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) close(r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x3ff, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000140)=""/206, 0xffffff6b}], 0x1) 18:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) 18:06:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:18 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000640)=0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl(r1, 0x1010008912, &(0x7f0000000180)="c0dca5055e0b01007be0704708ee18446dc012e50859ddfe40c49e76534a8b6304e421ba9e4abda51d39e3076db64fd455117f22d870c2449ee332fbe82db309425e2de0d61b24f36cfda626541030984166bd31fa92466a5b6d75eed6da708d7b075680759623269d53540be64aeca4d71582c02100a10d4f344962ebf17219755e080b2612959844cc7cac11924af8c7a29c86d8fc7d089c8a19168f917baaaa30d636ffc0f5fdc6cd3fe22da132dbacdb0ae2a2a5249279533947d9c89db6113eb1716b2f898086715bfa1da590c35fea8b9af4aef46ac1695411d8e8bf36ee80e477c4f4e4dd4693005b103e406e344872b3674026012048cca3bc3eb66df061e49f928f0473d14f9811a53bdf84fedcbd06bc1861502494f77579ba131e5042995dd88d06d8f06ad76c5345fae23ec35f8b03e947928826293a0e779abe38f05bd8deb67ae83a579f1ea29d08203fbd666355ed812f4ad1fec5e162a25601b659785aaf411c05561744628286a8147791b92e43fdfe6b25104b61a083361e0c19fab39f022958c190724de7398d20c57c507f35e80badb63fb57eb489618df1b15621d1520004e73caca432b4a425bb79f047a1eafd7826e6c9d3a460c2c89a7d6c2ce2f29e789283dd65f7bb83") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000440)='./file0\x00', 0x1001, 0x40f8) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000680)={0x0, @in={{0x2, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000580)={r4, 0x2}, &(0x7f00000005c0)=0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x1}}) getsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000380)=""/94, &(0x7f0000000400)=0x5e) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 18:06:18 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127b, r0) 18:06:18 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x10000) r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r0, 0x0) 18:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) [ 827.363492] XFS (loop0): Invalid superblock magic number 18:06:18 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127c, r0) 18:06:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x301000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_out(r1, 0x5462, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:18 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa000000, 0x0) 18:06:19 executing program 3 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:19 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127d, r0) 18:06:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xfe1e) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) r4 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:06:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'hwsim0\x00', {0x2, 0x4e24, @multicast1}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x40000) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xf93) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r3, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x63, 0x2) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000140)={'team0\x00', 0xfffffffffffffffb}) 18:06:19 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 827.730087] FAULT_INJECTION: forcing a failure. [ 827.730087] name failslab, interval 1, probability 0, space 0, times 0 18:06:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="c0dca5055e0bcfec7be070") socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x321941, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1000000000001, 0x0, 0x0, 0x1000000000, 0x3}}) [ 827.788277] CPU: 0 PID: 16961 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 827.795609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.805003] Call Trace: [ 827.807636] dump_stack+0x172/0x1f0 [ 827.811313] should_fail.cold+0xa/0x1b [ 827.815244] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 827.820559] ? lock_downgrade+0x810/0x810 [ 827.824746] ? ___might_sleep+0x163/0x280 [ 827.828936] __should_failslab+0x121/0x190 [ 827.833215] should_failslab+0x9/0x14 18:06:19 executing program 4: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="5800040001034c", 0x1e6}], 0x1000017d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000000a33580459a412156df2066c794a8b64f0f96f38ed6445965e0d776509510caaaa1f055a586b5dbb1fcf642c2006f7177dedc34d6e496a882c5aa74df21216bcb3c8570307f80e6ede5bbc7284819a067ac03ed4ae518740b92ba93cbb64f90a3575a5c65f3602513b932f02c"], 0xa) r3 = socket$packet(0x11, 0xffffffffffffffff, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$video4linux(&(0x7f00000001c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x80200, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r4, 0x0, 0x2ba, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x4004e23, @local}, 0x10) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) write$binfmt_elf64(r4, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) sendto$inet(r4, &(0x7f00000007c0)="8d3d92cf26631b832eae093f1fb84c8b0000000000000000000000001f00400000000000000000003747d2fc8f5633fc0a20d75da7d553a2aa3e20fb85195774e671586c0f36", 0x46, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r4, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xd57}, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) close(r2) r5 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140), &(0x7f00000003c0)=0xc) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x3c5) splice(r0, 0x0, r2, 0x0, 0x2b1, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000180)={0x0, 0xd09, 0x9, [0x0, 0xfc00000000000000, 0x8, 0x80000000, 0x80, 0xfffffffffffffffc, 0x5, 0x400, 0xfffffffffffffffe]}, &(0x7f00000001c0)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x90, 0x80000001, 0x2, 0xfff, 0x3, 0x1, 0x0, 0x0, r6}, &(0x7f0000000300)=0x20) [ 827.837055] kmem_cache_alloc_trace+0x2cc/0x760 [ 827.841762] ? __lockdep_init_map+0x10c/0x5b0 [ 827.846300] ? loop_info64_to_compat+0x6d0/0x6d0 [ 827.851098] __kthread_create_on_node+0xf2/0x460 [ 827.855921] ? lock_acquire+0x1ea/0x3f0 [ 827.859969] ? kthread_parkme+0xb0/0xb0 [ 827.864166] ? lo_ioctl+0x1c4/0x20e0 [ 827.868013] ? lock_downgrade+0x810/0x810 [ 827.872222] ? mutex_trylock+0x1e0/0x1e0 [ 827.876327] ? loop_info64_to_compat+0x6d0/0x6d0 [ 827.881154] kthread_create_on_node+0xbb/0xf0 [ 827.885709] ? __kthread_create_on_node+0x460/0x460 [ 827.890779] ? __lockdep_init_map+0x10c/0x5b0 [ 827.895320] ? __lockdep_init_map+0x10c/0x5b0 [ 827.899859] lo_ioctl+0xaf2/0x20e0 [ 827.903469] ? lo_rw_aio_complete+0x350/0x350 [ 827.908021] blkdev_ioctl+0xc38/0x1ac0 [ 827.911954] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 827.916783] ? blkpg_ioctl+0xa90/0xa90 [ 827.920814] ? retint_kernel+0x2d/0x2d [ 827.924754] ? trace_hardirqs_on_caller+0x6a/0x220 [ 827.929730] ? ___might_sleep+0x163/0x280 [ 827.933943] block_ioctl+0xee/0x130 [ 827.937618] ? blkdev_fallocate+0x410/0x410 [ 827.941995] do_vfs_ioctl+0xd5f/0x1380 [ 827.945916] ? selinux_file_ioctl+0x46f/0x5e0 [ 827.950445] ? selinux_file_ioctl+0x125/0x5e0 [ 827.954986] ? ioctl_preallocate+0x210/0x210 [ 827.959449] ? selinux_file_mprotect+0x620/0x620 [ 827.964360] ? iterate_fd+0x360/0x360 [ 827.968215] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 827.973789] ? fput+0x128/0x1a0 [ 827.977107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 827.982676] ? security_file_ioctl+0x8d/0xc0 [ 827.987117] ksys_ioctl+0xab/0xd0 [ 827.990598] __x64_sys_ioctl+0x73/0xb0 [ 827.994519] do_syscall_64+0xfd/0x620 [ 827.998350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.003567] RIP: 0033:0x4597c9 [ 828.006790] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.025728] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.033498] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 828.037662] XFS (loop0): Invalid superblock magic number [ 828.040793] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 828.040803] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.040811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 828.040820] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:19 executing program 3 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:19 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127e, r0) 18:06:19 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x200, 0x840) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x400, 0x2, 0x40, &(0x7f0000ffc000/0x1000)=nil, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 828.285583] FAULT_INJECTION: forcing a failure. [ 828.285583] name failslab, interval 1, probability 0, space 0, times 0 [ 828.324945] CPU: 0 PID: 17091 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 828.332470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.341941] Call Trace: [ 828.344586] dump_stack+0x172/0x1f0 [ 828.348285] should_fail.cold+0xa/0x1b [ 828.352258] ? mempool_alloc+0x380/0x380 [ 828.356567] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 828.361714] ? __should_failslab+0x99/0x190 [ 828.366080] ? mempool_alloc+0x380/0x380 [ 828.370175] __should_failslab+0x121/0x190 [ 828.374458] should_failslab+0x9/0x14 [ 828.378286] kmem_cache_alloc+0x47/0x700 [ 828.382567] ? ___might_sleep+0x163/0x280 [ 828.386750] ? mempool_alloc+0x380/0x380 [ 828.390844] mempool_alloc_slab+0x47/0x60 [ 828.395042] mempool_alloc+0x169/0x380 [ 828.398956] ? kasan_check_read+0x11/0x20 [ 828.403144] ? mempool_destroy+0x40/0x40 [ 828.407244] ? finish_task_switch+0x118/0x780 [ 828.411772] ? switch_mm_irqs_off+0x7fa/0x1370 [ 828.416397] ? __schedule+0x815/0x1c70 [ 828.420317] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.425163] bio_alloc_bioset+0x3cd/0x690 [ 828.429357] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.434145] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.438937] ? bvec_alloc+0x2f0/0x2f0 [ 828.442802] ? errseq_check+0x53/0x90 [ 828.446661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.452232] ? file_check_and_advance_wb_err+0x9e/0x3a0 [ 828.457694] blkdev_issue_flush+0xd3/0x300 [ 828.461983] blkdev_fsync+0x95/0xd0 [ 828.465672] ? thaw_bdev+0x1a0/0x1a0 [ 828.469460] vfs_fsync_range+0x141/0x230 [ 828.473652] vfs_fsync+0x2a/0x30 [ 828.477057] __loop_update_dio+0x4e1/0x6b0 [ 828.481422] lo_ioctl+0xf02/0x20e0 [ 828.485008] ? lo_rw_aio_complete+0x350/0x350 [ 828.489537] blkdev_ioctl+0xc38/0x1ac0 [ 828.493461] ? blkpg_ioctl+0xa90/0xa90 [ 828.497403] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 828.502203] ? __fget+0x340/0x540 [ 828.505709] ? ___might_sleep+0x163/0x280 [ 828.509893] block_ioctl+0xee/0x130 [ 828.513546] ? blkdev_fallocate+0x410/0x410 [ 828.517915] do_vfs_ioctl+0xd5f/0x1380 [ 828.522179] ? selinux_file_ioctl+0x46f/0x5e0 [ 828.526700] ? selinux_file_ioctl+0x125/0x5e0 [ 828.531224] ? ioctl_preallocate+0x210/0x210 [ 828.535660] ? selinux_file_mprotect+0x620/0x620 [ 828.540452] ? iterate_fd+0x360/0x360 [ 828.544290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 828.549871] ? security_file_ioctl+0x8d/0xc0 [ 828.554310] ksys_ioctl+0xab/0xd0 [ 828.557786] __x64_sys_ioctl+0x73/0xb0 [ 828.561701] do_syscall_64+0xfd/0x620 [ 828.565537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.570766] RIP: 0033:0x4597c9 [ 828.574003] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.593015] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.600768] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 828.608054] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 828.615344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 828.622809] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 18:06:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x18) fcntl$setstatus(r1, 0x4, 0x42803) 18:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xc000000, 0x0) 18:06:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x20807e) r2 = dup2(r0, r0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) [ 828.630123] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:20 executing program 3 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:20 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127f, r0) 18:06:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4f, 0x400) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000000c0)=0xe8) getgroups(0x3, &(0x7f0000000100)=[0xee01, 0xee00, 0xffffffffffffffff]) write$FUSE_ENTRY(r1, &(0x7f0000000340)={0x90, 0x0, 0x5, {0x4, 0x1, 0x12, 0x3, 0xee, 0x7, {0x1, 0x8, 0x3, 0x0, 0x10000, 0x9, 0x2, 0x3, 0x9, 0xfdb, 0x3ff, r2, r3, 0x1200000, 0x2}}}, 0x90) write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x5, {0x8}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000200)="c0dca5055e0bcfec7be070") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffffff7fffffff}]}) 18:06:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x201000008912, &(0x7f0000000280)="11dca5055e0bcfec7be070") r1 = socket(0x20000000000000a, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x8, &(0x7f0000e530e9)=""/16, &(0x7f00000001c0)=0x1d) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000002c0)="8e0e2b85987bd18f17dd791ef4e3a8dbedf8fbf14e6a317a544ff527b5f73b3d4f06b71cf6cd060a95e8e9811b417426d76789bc44974acd0d570a4e55f9a209c27b41f642c7bcea8187be4272a968a353a1e47c8a054ff18e5913792128615f91964dfdcfc846c6d9f67d87480dae2650eb09122b0962193b3e229be7959498ff5b9a5899bc90b8014875e52d1f938416e6b5bb816fbc00e82f35f0f9c8cd52afd006318bac3777663cfc8bbadd7fc54dcd27283cb8c15801b4a64a90b9cf3b0502ede8415a441b6450b4c7b38df1557b392e0d326756", 0xd7) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000001300b1002bbd7000fbdbdf25140000000ce5145035c7b1c1ff180cd76dbafb49b90b8f15cab98308008600ac050000004c037e00"/67, @ANYRES32=r2, @ANYBLOB='\f\x00-\x00\b\x00_\x00', @ANYRES32=r1, @ANYBLOB='\x00'], 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40) [ 828.892342] XFS (loop0): Invalid superblock magic number 18:06:20 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4b47, r0) [ 828.963273] FAULT_INJECTION: forcing a failure. [ 828.963273] name failslab, interval 1, probability 0, space 0, times 0 [ 828.990053] CPU: 0 PID: 17324 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 828.997135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.997145] Call Trace: [ 828.997181] dump_stack+0x172/0x1f0 18:06:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = gettid() sched_setaffinity(r2, 0x3d31, &(0x7f0000000200)=0xa000000000000005) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000040)={0x2, 0x35, 0x40, 'queue0\x00'}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = getpgrp(r2) mkdirat(r3, 0x0, 0x9) setpriority(0x0, r4, 0xffff) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000480)) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xfffffffffffffffd) clone(0x4007fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000280), 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='proc\x00', &(0x7f0000000740)='!\x00']) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101001, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 828.997208] should_fail.cold+0xa/0x1b [ 828.997234] ? retint_kernel+0x2d/0x2d [ 829.021539] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 829.026709] __should_failslab+0x121/0x190 [ 829.031014] should_failslab+0x9/0x14 [ 829.034852] kmem_cache_alloc_node+0x56/0x710 [ 829.039386] ? blk_queue_enter+0xa53/0xce0 [ 829.043666] create_task_io_context+0x33/0x450 [ 829.048302] generic_make_request_checks+0x1d39/0x24c0 [ 829.053883] ? blk_queue_bypass_end+0x210/0x210 [ 829.058585] ? trace_hardirqs_on_thunk+0x1a/0x1c 18:06:20 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000840)="c0dc8e055e0b6289ed8dac6de105faa9550449a1b9ad6dfe313d7defbe089f498efaf8163e511ac8ccab017b14fff76a699114f86c475f729d9901338f55cd0d65d13c57b56e0855f63f646b49ec5c8388b40cf8cfed6a109d10aa38ec685b421aa09ff5844cdf414a55a0497a5e6672d30c985fe8d8241f31e2d3820e3df7a41efebba4a67f988acf000000000048ae7c3bcf86fc29766b4e28b7e6d3335d0db75516261eb5a547c27e9807c6156d21ef6d2c7f9e20000000000000") close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 829.063386] ? lockdep_hardirqs_on+0x415/0x5d0 [ 829.068448] ? retint_kernel+0x2d/0x2d [ 829.072404] ? trace_hardirqs_on_caller+0x6a/0x220 [ 829.077375] generic_make_request+0x24c/0x12d0 [ 829.082000] ? blk_get_request+0x710/0x710 [ 829.086398] ? submit_bio+0xa8/0x480 [ 829.090146] submit_bio+0xba/0x480 [ 829.093906] ? submit_bio+0xba/0x480 [ 829.097659] ? generic_make_request+0x12d0/0x12d0 [ 829.102638] ? __lockdep_init_map+0x10c/0x5b0 [ 829.107175] ? retint_kernel+0x2d/0x2d [ 829.111100] ? __lockdep_init_map+0x10c/0x5b0 [ 829.115635] submit_bio_wait+0x115/0x1c0 [ 829.119727] ? submit_bio_wait_endio+0x40/0x40 [ 829.124360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 829.129932] ? file_check_and_advance_wb_err+0x9e/0x3a0 [ 829.135349] blkdev_issue_flush+0x20b/0x300 [ 829.139726] blkdev_fsync+0x95/0xd0 [ 829.143386] ? thaw_bdev+0x1a0/0x1a0 [ 829.147178] vfs_fsync_range+0x141/0x230 [ 829.151301] vfs_fsync+0x2a/0x30 [ 829.154741] __loop_update_dio+0x4e1/0x6b0 [ 829.159030] lo_ioctl+0xf02/0x20e0 [ 829.162776] ? lo_rw_aio_complete+0x350/0x350 [ 829.167301] blkdev_ioctl+0xc38/0x1ac0 [ 829.171233] ? blkpg_ioctl+0xa90/0xa90 [ 829.175150] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 829.179964] ? retint_kernel+0x2d/0x2d [ 829.183899] block_ioctl+0xee/0x130 [ 829.188527] ? blkdev_fallocate+0x410/0x410 [ 829.193234] do_vfs_ioctl+0xd5f/0x1380 [ 829.197181] ? selinux_file_ioctl+0x46f/0x5e0 [ 829.201718] ? selinux_file_ioctl+0x125/0x5e0 [ 829.206249] ? ioctl_preallocate+0x210/0x210 [ 829.210692] ? selinux_file_mprotect+0x620/0x620 [ 829.215511] ? iterate_fd+0x360/0x360 [ 829.219352] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 829.224152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 829.229803] ? security_file_ioctl+0x8d/0xc0 [ 829.234250] ksys_ioctl+0xab/0xd0 [ 829.237748] __x64_sys_ioctl+0x73/0xb0 [ 829.241671] do_syscall_64+0xfd/0x620 [ 829.245607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.250819] RIP: 0033:0x4597c9 [ 829.254045] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.273159] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.280899] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 829.288206] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 829.295767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.303068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 829.310355] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 [ 829.334656] XFS (loop0): Invalid superblock magic number 18:06:20 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xffffffffffffffa0, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000180)=r1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000000c0)={0x4}, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x305200, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9d) 18:06:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xd000000, 0x0) 18:06:20 executing program 3 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:20 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4b49, r0) 18:06:21 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:21 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c01, r0) [ 829.665810] XFS (loop0): Invalid superblock magic number [ 829.678194] FAULT_INJECTION: forcing a failure. [ 829.678194] name failslab, interval 1, probability 0, space 0, times 0 [ 829.697703] CPU: 1 PID: 17413 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 829.704767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 18:06:21 executing program 4: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xb) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x135}) ptrace$setregs(0xd, r1, 0x3ffffc, &(0x7f0000000000)) ptrace$cont(0x1f, r1, 0x0, 0x0) 18:06:21 executing program 1: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f00000001c0)={&(0x7f0000000440)="0160957dea32ca04dd898d4b202363be5633e335e9ada40db8057075c09c40c094171ccbf12598ada01830799096843ebeec056897c3daa25e014eaccb0ba804aa9b4841cb6ab014f93a15036334c20c708c53d738a5eaf5de51d2c966777e3b9e96899c5a88f87333f940bc40b820054ab03ef10f0345e1b6d33988fb1e63ad3cf8d613bae10df837646e55f07754ca6e7c924b0dbf1dbde343bebf2285ad6bbe173a48132af898f4386e7fb826149a821481c2489e9c8fab53543ca90112a6516e2639f77f877b2bd2960f17c297da8bbb5f4f2610824028901e94d927cd261ff0772c0fdf8e1fc25a1cc1dd88f770cfc1fe09fa5e5bdc91381b5ddebf29571d22966ea3ed76e067bee7229fc421e4575df4fefa5429317c63b6c730312273528108b2e3375bd4c5266981f62616ec124b798409896d513ff0b0482de786ed9e51f954bb2d170ccc3b6c5e1b06d630aa9c642690543a334e291cdeb75027baa0665435402b691ed8b011ec1958b663bd0abe5da1e48f4e7a90667273735f31c64c56c924dcf8e17d73fd0b5cb6eb043163dcb4aa2fb464edc73fe2d13aadc9ac20bfc243e910c56cb3909c950c557d1fd7336dee742f25284f8aa285658e7b848b1cbb90d3529ebd807644d49510c55d44931c1aabaa3752aba98402fcd37819c1611f8fd41eb6fdb35f87d6182a748a9d3d11b0aa8a1f42f7e62fb008f9a2acce83a67b84a9a20f75b352ba58b7df4b679a7e4a9a349ab80cf83ffaa5f545e327422fd2d91d37e1fb6e2ffa74ae0bb12520899049abb399ba923811d2fa23de017c994ba2975761172c1d0f6e71c9742c41654f2b4434a55323b1ddea7dd7903f194e595a5818bcdc753c021a0f7ded839c3de2e43822234926d28859194a7ad9d5b08239913067ab0af708f8b21e1eccb5ee8cfe7e57e3cc20c91704bb969f79a5a81e5b44ae9f03caa31693471e5600f8f7682ddeee163e7df6131347f414a8748ef6e7e8631e690cca5ba56bd82cc27c2bbfd6b50872f709726337424cbd33574dfd27a3e29cc10199fb57c641f5ac0d6fdeac9202f9bc73810c8483e88cc4e5513ca8437e57b0779f56c4a27bb72e90cc45181455f563b15d53ccfe084d71a091fdd115606d4f1b1001927f810142766940551a46c8ff8f4757c79bcdfb285230691e686d0db57b70c00943c9e4dd0b76f7a77f288f7c750adc39c68feb0b9be552c50babf38d76c376ffced535853d13a2828cd57c72a3a56e258e61fef5367f743db9fe498dca1df99f462b95f45edf39f08bd12017f438de8ee5506f1821701ba30b4b924f2a3bd0ed34653203a035fd598f92d8bbe281f33e4ee784aa353823d24cb69f282b974eca7604fed2061572863663f385db7f3ebad73225828ba107b7b8327b6f0265294e3c74b09ae8027db28c91a9dca4d3d3a9217361b46e5058ee71feb68959088d6201a3c0bf32d4c56bcd6bcee253fc05e4402707d3e9219f98b7d1d66ba885f264925c4ce18ebb3da809680c16d31e0dd40a98436361063d5f0b18fa2787665f823b266b393902dbf33eab65f3e52c78baacef98678487faa04a8e9e43ce3063931811f6858ae57f8760c4b8ebcc70686c44b2fc78b510edc0ba6dd0eaa29d1a1c303f871f7fc6c820f053b9dbc5dcf0f3c2252d118daa82d148ede84d3504a650575a7db17d709b5fd8b09eb60108254ec5c5a54b52fa9056714b6e4df8e49c03bb3b6b20e8171d5bf46f00c5fab4f06814f1ded482894f04b69d0ffe7ce377f0d8f6fedb7018a0860f9bff9b391a6ae4e5dbed5543065ec1612b95747fba671ac7777459acd67e36dd883d347f6c1bd556154b344d29bbaecfecd5daacaea171bd6ce984ffa8f754a029c9dfdd0bbd35b0508fa42f8be3e18aa52a0eafcf76d416004450d240b2d06205d46ea994eae36bc7eb508a75aa1e72965cdc933bf01b36641d2834caa00ef63ff24fa122fc629c6683971787b795e7cd14d3fcce02e7ed45f473e1f6650807826c6032fa65b5ea2c67d94fe8e5318dfd08344b86e633bda7023987855201f9d8695e58123d6ddf43661997d035a70bcb3e157a7807f424fb4be35ff57c1c2cedbe11f366092a65ba31a1a05c55d65a3dfdcbe3f4533794aae53db4bb7adbd5d7b503365b715d41480e1f4b8cbcabd1a2eb2ad70a079f4a17df8d8a4060ed5439e777f573f9b5014c22aa91cfa8caed7db068cbce3692d955e85249c0b0f111c272b05aeb6979a3e3ef75250660af871c99cb45065af9a960ea77a7ad3e70733381cee18378974877b5b3a12b2f24ce188f2d7636f6ec862b871d2450e1788a4178afd8991f31423e370749d36257e0ccab9ad593868ebee9471253542fc0fef3e4e8f209a20d8031a856791f56712002a9f4c7927ca0dc5565a1db2adc23dcf3f1ed60c4419223550f86c182259c90971c388ebca6557fd6c9f0fe1757966cc4b70a85e3e44ca6207301f34cb63789fcd860af0d833a69ecdab067697d45291319c2a7d3e8155cc2bb73e7368cc2c8be25ea07ddabc9b7befa8c8fe7ec955b7059ec32fc59cd65ef6332871a97d139c387e05b9276b4f16d6c0ac2ae2b9d3aee43ab1cbc374b84b8296adb99c5678e20c1ee93d2dc426fa2be608ec58c6f4b86b8d2e6b0eb3fd596b52e7e056e9f9c08a70188499e400fbcd1628a1f620dac0b4c0f9a920c4d02d260d547e0feb0645f1c255e7a0add9e2cc236b041280380a9ab89a692c837df4e8d779d3636b966280294b768ddb80dc5817b972befb877f4705288b275e868c7a6f01786494eb938d0852851e077f6417e435161911cdc83e7bd5b8b1e42bc036ee077b6ac3f648198b4d987cbd2929b9455f75954beb9f65d0a5b14c36e66d1c529994c9a0a43324865498e07a5bd5efb43f83a38869b311d7efc444a8b0c1ed7915cc58ff8609985d3653af17dc8b0d3c2270436c3bff8d57a4665bcdb6f220e0c67178586db37b926a06ff3cbf56af5dd2656749b3f4423f74a052f1d8a7ec10aed4a705e1236b18fddee4f3557b424406edff3c3d9837f9d7481fea08c3166633133ea4f8a5d7418ded024e5a3ea25aa96f8d20f73d60f7610c8f4adc08ea2e73d10f1b01f1975f190008c7297c9c53424dca6a9ece8f6e31730002530c37822a6c650bed00622e7897f9efc14efe5cb40f8fed39032e8a91e488322b52e49c816b3b871e8871dbc51e11adc2c0315c135a776ab3348698abd7b944b033bf10d744dcb75c162ea259cd8b59fc3cb72a154767077fe3520a92a8a202afbcce5bcc61ed6c91eb76aac3aa29ac962d60ed6a8b45cfbbc18a40ab64987979e3cb2c60fde3bc0c097598488ca9f25c849d37576e45daf99f5fa61f988854f8db0dddc14b3183c5a652e2bd4f5cfe7dc850a51f1d9dfcccf6b22e38c36bbb425bbe6ac5b06b12d866063db2feb36ef0df83b28125dd0243dce0990d4151ca99dcc5401435b5f613034c5a348ed0a644f7fef30adca803c37d8ec5ba17b4061084df7443a927b43b194e97f2cb6700fe20125034208d4fcca1d15bc7995cda0cf74c52cab3fa96333ac5747232826224f7765f90a3fb6391b9311c34f1a19f92ab97ab2f76b60ddd335dc21f39b34a21185b688396406426931b472d712c01d666abc89279ec42aafceba48fb0a02176c7a0f361e573ab24c0674c53859e556ccd0b6868d55f3c07d54cc7d92821c19333291a920649cf5b61da2b4994c3805f68d736cc210efa1e1e25a43ef002d42ae89f4d5164c39b36e77e32b701e81dc05b416671781d24066543e871e7db48465f87e0eb192c970255bdbaa40ebc7a6121b05a34097e3ac5cf7f5a9ffc8e1111393aa7b57b7f79ea5542c0fa8780b94e21189dc7b1e289272e867c949f0b197162d8e66242d5655c731315e012b56fc41486557362c585f5a3e36f38d9e7b708bf51e5b257e4f1d3a4322680f18d6e7b0f25fa20afbf0d6529085a1c4db8cb0c3f0ee9e8f9e144dc5c918f451f3c065658aa85d4f8923d7488c193ef2750fd50d4b35fd822671555c9877d8917e2db746b54226ead7c9223a69c2c6a75236115ae191eb2d04002609e6df8af927cd2055244006f7ebd95d57a0423e8c4eebfcd1692fc8e23388edd6018b84ce102b290e9446baf4ed15586ad8241ece0be8e3b2148bbf1b737d8f590a5ff5d1a61552c017bf8deced5289087ee06475e0118ff0e5917c879d477da15658ee3185186ec2f16fbe2e6ff45104d37f0005785fe719ed637bb65bebf7fd95ccf30005a5d652fcdae96cd55adcb52b0c6049381b64f57d7177b40651962d63cf0a09a947193cdff662b784df7f5200e66b55197c26669f230d6d8a3727ae3eec261d043d95febb3529310be2c6e1af4845aac203a2678b8deb662386edf55e4892d3bf16df49d278e13c2c8aa501b4e09b01b8a17c2fabaf4c65a110e4b64c2d12e0c04c61cbd59489578de1d35be507d2252ec9dfa50cad796bfe2e438f0c131a514d6c52668ef25766a75e38bb904a868ed02798a31dca65112ea0615edf9d5c78b361b5b4689a18140e34fae42688f277edbf488452c1e0f289e209a7aa3279b0ade6081c6352548c763e295ffc9a47ef5fc7c6f8b6c7860b682362c8e7fef01e8654659c30557afc889b514c3c1dea71b4890bcfd00b8c7b3645803891d54d4c10de2d80fb20b10f98b3ad8d220ccfd3eaba5bace75a4d19ae2384d37e108fe360ae5e37f07b9e2b951da90f16083617ce9b53c28c2259578860a9f7130d4a7001be44ebcce2c317bf82e02c2b52d6314f2fa2d4682e9d5f8c4ac5e8231cefb3d79f516f8f4eb948557762753bedf1ee6c710f51ba7424286bdba69d74da59c6e6932f694e69fc038ed577cfa84a069060227a9e9b8b747dd8fcbad03269dc05bb886d4de644b43cda50dbcb21a544aeaec5bc974554c71d14353de0c3b08119450e156dc559b9cccce73aa9eae9bec89caab8714c2c35871463152aeb8068571b88d65a3e71bb7421c08e3bed06cdfb076a067a28ef70ee7917f45cac32ee90860649238e5ef779cebf4efe18f54a2e5d9fce131177a74f56165404e5113e54eb597c4c1ca589bd0eff2758537f15074348c84c9a6b32fa178d1b3fdc0a083bbca5ee509d758e2fb26416d4037456828c65b4c15d4397ca6955af44fb365c7f79686c81cacae5223e0b9cc6cf8f72082ffd06f1929cbb447f7d26a161620bf62b016fca87e3a62f0a32bd56e6b9841bc989fbbaf639d01f897ccad6183b1ec5a73f6b4d177dc8a0087dfe6eb0cd6a94a638b719fd33aa554cbf0627f9348604fa0f91912ccfac54fee89023e896d6b0e324b4211a3ec4b7fa0f7646bd043a0b35ee104663a392dde64d1fa675720f397fb32cf425a383e914831f6ed8497e805cbc1e6f1440037f2374fb1be59eaadc50cf8b9ce56e50805cd767f93091a5f81466bc326565041e8e7f76519f2d009d1cb2513313a2b1f1e170c80f57439e9c5ca9e5f8a11568ba9568da585cc67bbcc4c874bf5b29f1c575329ca7a951c16660b9e5afe10f53307d16e3d251ca09463ad41554dc18e49345c3df1bd65f72d3b78e35f66d31c85162298c3da99879d9917fc4fbece13a2e8fb329d063302a86da0d74c79db9518fa16aa8f528ee6d6df54913d47bb5dc54ebce66218ba0814234f8a84667b67bffcdaf344215ea22f2750a614b0550f71830a58604fd425cbc44138d028b1641538d71df1f91c3959a2eb08dacd2d8216bdaa01d520f5278cbc1ed011338", 0x1000}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400)='/dev/uinput\x00', 0x802, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000200)=0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0xf) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200100000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) [ 829.714145] Call Trace: [ 829.716769] dump_stack+0x172/0x1f0 [ 829.720451] should_fail.cold+0xa/0x1b [ 829.724498] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 829.729636] ? lock_downgrade+0x810/0x810 [ 829.733817] ? ___might_sleep+0x163/0x280 [ 829.738010] __should_failslab+0x121/0x190 [ 829.742287] should_failslab+0x9/0x14 [ 829.746129] kmem_cache_alloc+0x2ae/0x700 [ 829.750330] ? mark_held_locks+0x100/0x100 [ 829.754605] __kernfs_new_node+0xef/0x680 [ 829.758808] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 829.763605] ? mark_held_locks+0xb1/0x100 [ 829.767797] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 829.772594] ? lockdep_hardirqs_on+0x415/0x5d0 [ 829.777212] ? retint_kernel+0x2d/0x2d [ 829.781158] ? trace_hardirqs_on_caller+0x6a/0x220 [ 829.786124] ? mark_held_locks+0xb1/0x100 [ 829.790310] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 829.795111] kernfs_new_node+0x99/0x130 [ 829.799135] kernfs_create_dir_ns+0x52/0x160 [ 829.803585] internal_create_group+0x1cb/0xc30 [ 829.808211] ? lock_release+0x47a/0xa30 [ 829.812241] ? remove_files.isra.0+0x190/0x190 [ 829.816877] sysfs_create_group+0x20/0x30 [ 829.821068] lo_ioctl+0xf8f/0x20e0 [ 829.824654] ? lo_rw_aio_complete+0x350/0x350 [ 829.829220] blkdev_ioctl+0xc38/0x1ac0 [ 829.833324] ? blkpg_ioctl+0xa90/0xa90 [ 829.837248] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 829.842042] ? retint_kernel+0x2d/0x2d [ 829.845976] block_ioctl+0xee/0x130 [ 829.849634] ? blkdev_fallocate+0x410/0x410 [ 829.854006] do_vfs_ioctl+0xd5f/0x1380 [ 829.857941] ? selinux_file_ioctl+0x46f/0x5e0 [ 829.862484] ? selinux_file_ioctl+0x125/0x5e0 [ 829.867020] ? ioctl_preallocate+0x210/0x210 [ 829.871477] ? selinux_file_mprotect+0x620/0x620 [ 829.876281] ? iterate_fd+0x360/0x360 [ 829.880126] ? ksys_write+0x1f1/0x2d0 [ 829.883966] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 829.888853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 829.894465] ? security_file_ioctl+0x8d/0xc0 [ 829.899038] ksys_ioctl+0xab/0xd0 [ 829.902537] __x64_sys_ioctl+0x73/0xb0 [ 829.906730] do_syscall_64+0xfd/0x620 [ 829.910598] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.915826] RIP: 0033:0x4597c9 [ 829.919047] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.937972] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 829.945719] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 829.953298] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 829.960597] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 829.967891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 829.975194] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:21 executing program 3 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:21 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffdc8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc\x00') ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="b98b2a2a0cda83ecbfadef4ac8f929a8a3f0734c0a45ed00883a79b5376d31db6905e6329dda031ad92a9c0021dd1129d469c26bd32450ef62d609537cfc0f3286bcb0f068fe40cfdd0e360ac7aa4cea5ce27124fbe3eb0fbe5c20e15c5b3762bc1fd23ed8195976986e0d7aec1997ea738e453628ff9247fe1c") ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000400)={r2, 0x8, &(0x7f0000000300)=[0x40, 0x937f, 0x20, 0x7fffffff, 0x4, 0x91d6, 0x3ff, 0xc7], &(0x7f0000000340)=[0x6b3, 0x0, 0x6, 0xffff, 0x7, 0x9, 0x1, 0x1, 0x8000], 0x70, 0x8, 0x7ff, &(0x7f0000000380)=[0x7fff, 0x3, 0x1a42, 0x200, 0x178701d4, 0xcd1, 0x100000000, 0xfffffffffffffffe], &(0x7f00000003c0)=[0xfffffffffffffff9, 0x7]}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000180)={{0x1, 0x8, 0x3, 0x0, 0x5, 0x5}, 0x6}) setitimer(0x3, &(0x7f0000000200)={{}, {0x0, 0x7530}}, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000004c0)={r4}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000500)={0x6, 0x0, 0x2, 0x3ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000580)={0x3, r5}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000240)={r3, 0x1}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0xa00) 18:06:21 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c02, r0) 18:06:21 executing program 1: r0 = socket$inet_sctp(0x2, 0xd, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000003cc0)={0x0, @in={{0xa, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x9c) 18:06:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0xf000000, 0x0) 18:06:21 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x30000, &(0x7f00000002c0)=ANY=[@ANYBLOB="6d1c339bec67b61b7fdbd0629f2bdfde7d686847b1d3367e80cf61717b10ec93a6872d45b9b2b6ec8ecfd20b3483bbe551aea42c846ee6d6d912de9f60d71b60889435b1fda9b0403ae93ae323fbfb"]) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) pwrite64(r0, &(0x7f0000000500)="fb6cbe815d26453fce843c5b36cbd05847f85bb0893cda99fda4299a7929e8d80fce207ae71f047806fe46e2302d1d411748749a22f23cd7aa7f3370305c0145833d55a1179c149e87578fba56352ddfdd3e571dfb9030b3133babf178d466a14920d4e14103cf52e6323428b82b55d0de85ff94a59c6125d2374eeb912756cea5aa243427a8d24eaad0716ed4fe97ecbc614641ed9485c362325d2ba8ed28bd23baf6e42c3ba8f2eb35d4ab57b7635a7c73763988c35f01777ce5cb5ac147b8d5c52fc36e98fef23f2b8a6340851e2f4d317e06201370d13db1e15e6400d2c823006f35cba9baebb6a8f683f4", 0xed, 0x3) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) fanotify_mark(r1, 0x99, 0x8000000, r2, &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) fcntl$getown(r1, 0x9) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x1, 0x6, @remote}, 0x10) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x4) fdatasync(r0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) [ 830.323540] FAULT_INJECTION: forcing a failure. [ 830.323540] name failslab, interval 1, probability 0, space 0, times 0 [ 830.335799] CPU: 0 PID: 17488 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 830.342853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.352239] Call Trace: [ 830.354868] dump_stack+0x172/0x1f0 [ 830.358528] should_fail.cold+0xa/0x1b [ 830.362446] ? is_bpf_text_address+0xd3/0x170 [ 830.366994] ? fault_create_debugfs_attr+0x1e0/0x1e0 18:06:21 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000300)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x18}}], 0x2, 0x0) [ 830.372134] ? __kernel_text_address+0xd/0x40 [ 830.376666] ? unwind_get_return_address+0x61/0xa0 [ 830.381642] __should_failslab+0x121/0x190 [ 830.385922] should_failslab+0x9/0x14 [ 830.389759] kmem_cache_alloc+0x47/0x700 [ 830.393933] ? retint_kernel+0x2d/0x2d [ 830.397869] ? trace_hardirqs_on_caller+0x6a/0x220 [ 830.402846] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 830.408512] idr_get_free+0x50f/0xa20 [ 830.412359] idr_alloc_u32+0x1d6/0x390 [ 830.416294] ? __fprop_inc_percpu_max+0x230/0x230 [ 830.421179] ? __lock_is_held+0xb6/0x140 [ 830.425269] ? should_fail+0x14d/0x85c [ 830.429202] ? __lock_is_held+0xb6/0x140 [ 830.433301] idr_alloc_cyclic+0x132/0x270 [ 830.437505] ? idr_alloc+0x150/0x150 [ 830.441247] ? kasan_check_write+0x14/0x20 [ 830.445513] ? do_raw_spin_lock+0xc8/0x240 [ 830.449786] __kernfs_new_node+0x171/0x680 [ 830.454068] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 830.458872] ? __lock_acquire+0x6eb/0x48f0 [ 830.463152] ? __wake_up_common_lock+0xfe/0x190 [ 830.467853] ? mark_held_locks+0xb1/0x100 [ 830.472040] kernfs_new_node+0x99/0x130 [ 830.476053] kernfs_create_dir_ns+0x52/0x160 [ 830.480497] internal_create_group+0x1cb/0xc30 [ 830.485119] ? bd_set_size+0x89/0xb0 [ 830.488870] ? remove_files.isra.0+0x190/0x190 [ 830.493502] sysfs_create_group+0x20/0x30 [ 830.497683] lo_ioctl+0xf8f/0x20e0 [ 830.501255] ? lo_rw_aio_complete+0x350/0x350 [ 830.505816] blkdev_ioctl+0xc38/0x1ac0 [ 830.509761] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.514564] ? blkpg_ioctl+0xa90/0xa90 [ 830.518484] ? lockdep_hardirqs_on+0x415/0x5d0 [ 830.523101] ? retint_kernel+0x2d/0x2d [ 830.527029] ? trace_hardirqs_on_caller+0x6a/0x220 [ 830.532016] ? __fget+0x340/0x540 [ 830.535531] ? ___might_sleep+0x163/0x280 [ 830.539722] block_ioctl+0xee/0x130 [ 830.543385] ? blkdev_fallocate+0x410/0x410 [ 830.547742] do_vfs_ioctl+0xd5f/0x1380 [ 830.551662] ? selinux_file_ioctl+0x46f/0x5e0 [ 830.556215] ? selinux_file_ioctl+0x125/0x5e0 [ 830.560737] ? ioctl_preallocate+0x210/0x210 [ 830.565173] ? selinux_file_mprotect+0x620/0x620 [ 830.569989] ? iterate_fd+0x360/0x360 [ 830.573982] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 830.578783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 830.584360] ? security_file_ioctl+0x8d/0xc0 [ 830.588804] ksys_ioctl+0xab/0xd0 [ 830.592297] __x64_sys_ioctl+0x73/0xb0 [ 830.596236] do_syscall_64+0xfd/0x620 [ 830.600097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.605318] RIP: 0033:0x4597c9 [ 830.608540] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 830.627556] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 830.635298] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 830.642626] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 830.649945] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 830.657245] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 830.664570] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:22 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, r0) 18:06:22 executing program 3 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x8000100050, 0x0, 0x0, 0x2}, {0x80000006, 0x0, 0x0, 0x9}]}, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x3, 0x2) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x12) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x12, 0xd, 0x4, "50ae326b6f382cc538b671fc15c0e15de5bd4093455a8546a3d87de6a2cb87fe031f36f90c8704e0a9583c41c3f96a1dc9ad8f1bd4542fd585d4c0105a655004", "0b6212cf4ad6a6c103755b1f62294ff8558980a22b58404d539cbb5c6750c2ea", [0x4, 0x1]}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) timer_create(0x2, &(0x7f0000000340)={0x0, 0x17, 0x3, @thr={&(0x7f00000001c0)="ee71a6352ab4910b27b1073ef296812bb3bcb8cfe3fffdc1bec20377448feef8ce68b6c07628f41837fa0e9e8afe13f70a9ddee122cbe81bbdfed60858bb84cc18c4e0815fda1550088a2757785145d8de3bf361ecd763729013870501b15d755b77b0b5e6fe1e735df28a321a83b5f1e25ebdc9522496547b8df9de52ccc85fd5185144762469ec3a412b1a8362f9e35f4f99520d8d83d3", &(0x7f0000000280)="1da12aed6cdca921cf5c9b0ac3b67d03e0220843c1ee95e9538497857ae28767f27ea385adaaba6d9fcdb26b9a9653d47ab207c40ad1db1247677eedb256ad5bf7091b3e9d9a41ee980ea3c58eb347d1203c9329012a8c51a2c06e749ff966ac95ad19b27d4ab5a862b94a61f50e78e965fc87d29d70e65acc6d4993d88e7f0954c6e02a64a4250773159e7b09"}}, &(0x7f0000000380)=0x0) timer_gettime(r3, &(0x7f00000003c0)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x2) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000440)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f00000000c0)={0x1ca, 0x0, 0x2, 0x100000001}, 0x6) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) 18:06:22 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) [ 830.842524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pig=17610 comm=syz-executor.1 [ 830.890437] XFS (loop0): Invalid superblock magic number 18:06:22 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c04, r0) 18:06:22 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xf04, 0x282) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x4000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfd222853389e595) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7d, 0x0, [0x48e], [0xc1]}) 18:06:22 executing program 5: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) [ 831.043834] FAULT_INJECTION: forcing a failure. [ 831.043834] name failslab, interval 1, probability 0, space 0, times 0 [ 831.056042] CPU: 1 PID: 17616 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 831.063095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.072481] Call Trace: [ 831.075112] dump_stack+0x172/0x1f0 [ 831.078788] should_fail.cold+0xa/0x1b [ 831.082732] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 831.087895] ? __lock_is_held+0xb6/0x140 [ 831.092091] __should_failslab+0x121/0x190 [ 831.096456] should_failslab+0x9/0x14 [ 831.100310] kmem_cache_alloc+0x47/0x700 [ 831.104410] ? retint_kernel+0x2d/0x2d [ 831.108337] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 831.114031] idr_get_free+0x50f/0xa20 [ 831.117887] idr_alloc_u32+0x1d6/0x390 [ 831.121813] ? __fprop_inc_percpu_max+0x230/0x230 [ 831.126697] ? __lock_is_held+0xb6/0x140 [ 831.130794] ? should_fail+0x14d/0x85c [ 831.134721] ? __lock_is_held+0xb6/0x140 [ 831.138918] idr_alloc_cyclic+0x132/0x270 [ 831.143108] ? idr_alloc+0x150/0x150 [ 831.146863] ? kasan_check_write+0x14/0x20 [ 831.151138] ? do_raw_spin_lock+0xc8/0x240 [ 831.155416] __kernfs_new_node+0x171/0x680 [ 831.159688] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 831.164660] ? __lock_acquire+0x6eb/0x48f0 [ 831.168936] ? mark_held_locks+0xb1/0x100 [ 831.173120] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 831.177935] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 831.182816] ? lockdep_hardirqs_on+0x415/0x5d0 [ 831.187434] kernfs_new_node+0x99/0x130 [ 831.191475] kernfs_create_dir_ns+0x52/0x160 [ 831.195923] internal_create_group+0x1cb/0xc30 [ 831.200539] ? bd_set_size+0x89/0xb0 [ 831.204296] ? remove_files.isra.0+0x190/0x190 [ 831.208924] sysfs_create_group+0x20/0x30 [ 831.213111] lo_ioctl+0xf8f/0x20e0 [ 831.216694] ? lo_rw_aio_complete+0x350/0x350 [ 831.221230] blkdev_ioctl+0xc38/0x1ac0 [ 831.225160] ? blkpg_ioctl+0xa90/0xa90 [ 831.229094] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 831.233893] ? retint_kernel+0x2d/0x2d [ 831.237822] block_ioctl+0xee/0x130 [ 831.241489] ? blkdev_fallocate+0x410/0x410 [ 831.245850] do_vfs_ioctl+0xd5f/0x1380 [ 831.249771] ? selinux_file_ioctl+0x46f/0x5e0 [ 831.254302] ? selinux_file_ioctl+0x125/0x5e0 [ 831.258847] ? ioctl_preallocate+0x210/0x210 [ 831.263383] ? selinux_file_mprotect+0x620/0x620 [ 831.268188] ? iterate_fd+0x360/0x360 [ 831.272033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 831.277607] ? fput+0x128/0x1a0 [ 831.280942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 831.286517] ? security_file_ioctl+0x8d/0xc0 [ 831.290960] ksys_ioctl+0xab/0xd0 [ 831.294454] __x64_sys_ioctl+0x73/0xb0 [ 831.298386] do_syscall_64+0xfd/0x620 [ 831.302231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.307487] RIP: 0033:0x4597c9 [ 831.310728] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 831.330558] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.338308] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 831.345604] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 831.352903] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 831.360340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 831.367672] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000000, 0x0) 18:06:22 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r0) 18:06:22 executing program 3 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:22 executing program 5: pipe(0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x9, 0x7, 0x5, 0x80000000001}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r0, &(0x7f00000000c0), 0x0}, 0x18) prctl$PR_SVE_GET_VL(0x33, 0x1e32f) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000fff000/0x1000)=nil) 18:06:23 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) sendto$inet6(r1, &(0x7f0000000140)="8e7111dd24120f0f9f9f6fac8c3c95183e9f51a18390615ccbc0ce4b442a91d31ff5c27aff522db5829004eb7e092710109298b6de8f26830e5f8feaae2d4b0d3f5f1087c631a6eaf65d7e2c23c5494fe4e926fe2527433dc9643b4008abd3ed91068f8e2b6b61dc1db00ecc76868afa733e57fbdaecdf1a4693f6978a53da8e7278ac025478f39d19523ddb556db53ea0031850a0f4c6038d129fc149d029e51d79f555aef4e150cc0dda31", 0xac, 0x8000, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @ipv4={[], [], @rand_addr=0x1000}}, 0x1c) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000000040), 0x40000000000020f, 0x4ffe0) recvmmsg(r2, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x14000, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x9, 0x8, 0x1, "9d23b0cf2b886002884a817fb25e5bafa2a1136dd10de3a70cfe6e02ecb82940", 0x797f5f57}) close(r1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e23, @loopback}}) 18:06:23 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 18:06:23 executing program 5: pipe(0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) [ 831.682350] XFS (loop0): Invalid superblock magic number [ 831.709931] FAULT_INJECTION: forcing a failure. [ 831.709931] name failslab, interval 1, probability 0, space 0, times 0 [ 831.737899] CPU: 1 PID: 17749 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 831.744972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.754359] Call Trace: [ 831.756989] dump_stack+0x172/0x1f0 [ 831.760719] should_fail.cold+0xa/0x1b [ 831.764655] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 831.769884] ? lock_downgrade+0x810/0x810 [ 831.774066] ? ___might_sleep+0x163/0x280 [ 831.778251] __should_failslab+0x121/0x190 [ 831.782519] should_failslab+0x9/0x14 [ 831.786353] kmem_cache_alloc+0x2ae/0x700 [ 831.790570] ? lock_downgrade+0x810/0x810 [ 831.794767] __kernfs_new_node+0xef/0x680 [ 831.798959] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 831.803862] ? wait_for_completion+0x440/0x440 [ 831.808501] ? mutex_unlock+0xd/0x10 [ 831.812259] ? kernfs_activate+0x192/0x1f0 [ 831.816537] kernfs_new_node+0x99/0x130 [ 831.820557] __kernfs_create_file+0x51/0x340 [ 831.825010] sysfs_add_file_mode_ns+0x222/0x560 [ 831.829730] internal_create_group+0x383/0xc30 [ 831.834353] ? lock_release+0x47a/0xa30 [ 831.838382] ? remove_files.isra.0+0x190/0x190 [ 831.843016] sysfs_create_group+0x20/0x30 [ 831.847209] lo_ioctl+0xf8f/0x20e0 [ 831.850793] ? lo_rw_aio_complete+0x350/0x350 [ 831.855328] blkdev_ioctl+0xc38/0x1ac0 [ 831.859251] ? find_held_lock+0x35/0x130 [ 831.863348] ? blkpg_ioctl+0xa90/0xa90 [ 831.867287] ? __fget+0x340/0x540 [ 831.870776] ? ___might_sleep+0x163/0x280 [ 831.874967] block_ioctl+0xee/0x130 [ 831.878633] ? blkdev_fallocate+0x410/0x410 [ 831.882997] do_vfs_ioctl+0xd5f/0x1380 [ 831.886920] ? selinux_file_ioctl+0x46f/0x5e0 [ 831.891469] ? selinux_file_ioctl+0x125/0x5e0 [ 831.896110] ? ioctl_preallocate+0x210/0x210 [ 831.900556] ? selinux_file_mprotect+0x620/0x620 [ 831.905359] ? iterate_fd+0x360/0x360 [ 831.909200] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 831.914799] ? fput+0x128/0x1a0 [ 831.918125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 831.923718] ? security_file_ioctl+0x8d/0xc0 [ 831.928167] ksys_ioctl+0xab/0xd0 [ 831.931662] __x64_sys_ioctl+0x73/0xb0 [ 831.935588] do_syscall_64+0xfd/0x620 [ 831.939431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.944657] RIP: 0033:0x4597c9 [ 831.947880] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 831.966806] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.974546] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 831.981862] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 18:06:23 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f00000002c0)={0x5ba284f4, 0x9}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/47, 0x2f) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) fcntl$getflags(r1, 0x3) getsockname$packet(r2, &(0x7f00000001c0), &(0x7f0000000380)=0x14) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001f80)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x3, 0x1}}, 0x80, &(0x7f0000002040)=[{0x0}], 0x1}}], 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 831.989156] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 831.996576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 832.003977] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:23 executing program 3 (fault-call:3 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:23 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0) 18:06:23 executing program 5: pipe(0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r0, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10010000, 0x0) 18:06:23 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000005880)={{0x3, 0x8, 0x3, 0x9, 0x3, 0x1f}, 0x3, 0x81, 0x7, 0x0, 0x9, "aad0d103ff6fced3bb20148c4ce33b820ba2f8622d5cdd5f38298c6ea04f9d64fe78f21972fe6748338955477189e1293310963f6fe34ccc6c88427ee6c289d583af595e233beca71b26f7ecddb52aa104fc8f81d18bc0a66076c01571e9284b663066b000a12fecf49f627810da06462e44a0426c8dc6d6782f1fd6d3a3001e"}) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmmsg(r0, &(0x7f0000005740)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f0000000580)=""/158, 0x9e}, {&(0x7f0000000640)=""/205, 0xcd}, {&(0x7f0000000740)=""/240, 0xf0}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/125, 0x7d}, {&(0x7f0000000980)=""/203, 0xcb}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x9, &(0x7f0000001b40)=""/219, 0xdb}, 0x4c8f}, {{&(0x7f0000001c40)=@caif, 0x80, &(0x7f0000000180)=[{&(0x7f0000001cc0)=""/129, 0x81}], 0x1, &(0x7f0000001d80)=""/103, 0x67}, 0xe881}, {{&(0x7f0000001e00)=@x25={0x9, @remote}, 0x80, &(0x7f0000004080)=[{&(0x7f0000001e80)=""/211, 0xd3}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/247, 0xf7}], 0x4, &(0x7f00000040c0)=""/105, 0x69}, 0xfffffffffffffffc}, {{&(0x7f0000004140)=@caif=@dbg, 0x80, &(0x7f0000005640)=[{&(0x7f00000041c0)=""/235, 0xeb}, {&(0x7f00000042c0)=""/35, 0x23}, {&(0x7f0000004300)=""/253, 0xfd}, {&(0x7f0000004400)=""/26, 0x1a}, {&(0x7f0000004440)=""/218, 0xda}, {&(0x7f0000004540)=""/127, 0x7f}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/55, 0x37}, {&(0x7f0000005600)=""/2, 0x2}], 0x9, &(0x7f0000005700)=""/50, 0x32}}], 0x4, 0x1, &(0x7f0000005840)={0x77359400}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0xfffffffffffffed5) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @bt={0x0, 0x0, 0xffffffffc496a437}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='user\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 18:06:23 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 832.342323] FAULT_INJECTION: forcing a failure. [ 832.342323] name failslab, interval 1, probability 0, space 0, times 0 [ 832.387297] CPU: 1 PID: 17872 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 832.394387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 832.403767] Call Trace: [ 832.406401] dump_stack+0x172/0x1f0 [ 832.410071] should_fail.cold+0xa/0x1b [ 832.414013] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 832.419159] ? lock_downgrade+0x810/0x810 [ 832.423378] ? ___might_sleep+0x163/0x280 [ 832.427575] __should_failslab+0x121/0x190 [ 832.431855] should_failslab+0x9/0x14 [ 832.436170] kmem_cache_alloc+0x2ae/0x700 [ 832.440360] ? lock_downgrade+0x810/0x810 [ 832.444554] __kernfs_new_node+0xef/0x680 [ 832.448741] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 832.453574] ? wait_for_completion+0x440/0x440 [ 832.458204] ? mutex_unlock+0xd/0x10 [ 832.461959] ? kernfs_activate+0x192/0x1f0 [ 832.466237] kernfs_new_node+0x99/0x130 [ 832.470258] __kernfs_create_file+0x51/0x340 [ 832.474879] sysfs_add_file_mode_ns+0x222/0x560 [ 832.479596] internal_create_group+0x383/0xc30 [ 832.484213] ? bd_set_size+0x89/0xb0 [ 832.487968] ? remove_files.isra.0+0x190/0x190 [ 832.492595] sysfs_create_group+0x20/0x30 [ 832.496776] lo_ioctl+0xf8f/0x20e0 [ 832.500351] ? lo_rw_aio_complete+0x350/0x350 [ 832.504881] blkdev_ioctl+0xc38/0x1ac0 [ 832.508806] ? blkpg_ioctl+0xa90/0xa90 [ 832.512730] ? trace_hardirqs_on_caller+0x6a/0x220 [ 832.517822] ? __fget+0x340/0x540 [ 832.521316] ? ___might_sleep+0x163/0x280 [ 832.525507] block_ioctl+0xee/0x130 [ 832.529172] ? blkdev_fallocate+0x410/0x410 [ 832.533531] do_vfs_ioctl+0xd5f/0x1380 [ 832.537450] ? selinux_file_ioctl+0x46f/0x5e0 [ 832.541985] ? selinux_file_ioctl+0x125/0x5e0 [ 832.546527] ? ioctl_preallocate+0x210/0x210 [ 832.551064] ? selinux_file_mprotect+0x620/0x620 [ 832.555865] ? iterate_fd+0x360/0x360 [ 832.559704] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 832.565282] ? fput+0x128/0x1a0 [ 832.568607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 832.574182] ? security_file_ioctl+0x8d/0xc0 [ 832.578630] ksys_ioctl+0xab/0xd0 [ 832.582122] __x64_sys_ioctl+0x73/0xb0 [ 832.586044] do_syscall_64+0xfd/0x620 [ 832.589886] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 832.595103] RIP: 0033:0x4597c9 [ 832.598326] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.617257] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 832.625009] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 18:06:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x80011, r2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000003940)=0x4) [ 832.632328] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 832.639627] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 832.646920] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 832.654222] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:24 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x4, 0x0, &(0x7f0000000040)) 18:06:24 executing program 3 (fault-call:3 fault-nth:8): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) 18:06:24 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) 18:06:24 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 832.871337] XFS (loop0): Invalid superblock magic number 18:06:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f00000000c0)={0x16, 0x0, 0x0}) lsetxattr$trusted_overlay_opaque(0x0, 0x0, &(0x7f0000000140)='y\x00', 0x2, 0x3) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000180)="51bb67cc522bbab205b02b2b1493aaeaa570268fe32e3068f6a887eabccad35e4c12f15c6583dae1076ee977e0bf3aed57972c5e5058d20cb053a23c1a9a526b33c8a4b67d61749d026f1f09396311c603b56e7003c21b994ce58cafc0ff69e098f8c391ce4eff8f90f819cf687791748658534e060ee469222817454686b23a", 0x80) write$P9_RLOCK(r1, &(0x7f0000000380)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x6) fcntl$setflags(r0, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7c0000000700100f25000049fb00000095000000f7008000"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x10001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r4, 0xe782}, &(0x7f00000002c0)=0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = semget(0x0, 0x7, 0x40) semctl$GETPID(r5, 0x2, 0xb, &(0x7f0000000300)=""/80) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 18:06:24 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x541b, r0) [ 833.000012] FAULT_INJECTION: forcing a failure. [ 833.000012] name failslab, interval 1, probability 0, space 0, times 0 [ 833.027175] CPU: 0 PID: 17909 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 833.034242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.043616] Call Trace: [ 833.046236] dump_stack+0x172/0x1f0 [ 833.049902] should_fail.cold+0xa/0x1b [ 833.053826] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 833.059025] ? lock_downgrade+0x810/0x810 [ 833.063211] ? ___might_sleep+0x163/0x280 [ 833.067399] __should_failslab+0x121/0x190 [ 833.071667] should_failslab+0x9/0x14 [ 833.075504] kmem_cache_alloc+0x2ae/0x700 [ 833.079690] ? lock_downgrade+0x810/0x810 [ 833.083885] __kernfs_new_node+0xef/0x680 [ 833.088082] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 833.092895] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.097689] ? lockdep_hardirqs_on+0x415/0x5d0 [ 833.102300] ? retint_kernel+0x2d/0x2d [ 833.106220] ? trace_hardirqs_on_caller+0x6a/0x220 [ 833.111191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.116007] kernfs_new_node+0x99/0x130 [ 833.120026] __kernfs_create_file+0x51/0x340 [ 833.124472] sysfs_add_file_mode_ns+0x222/0x560 [ 833.129185] internal_create_group+0x383/0xc30 [ 833.133804] ? bd_set_size+0x89/0xb0 [ 833.137562] ? remove_files.isra.0+0x190/0x190 [ 833.142195] sysfs_create_group+0x20/0x30 [ 833.146408] lo_ioctl+0xf8f/0x20e0 [ 833.149998] ? lo_rw_aio_complete+0x350/0x350 [ 833.154529] blkdev_ioctl+0xc38/0x1ac0 [ 833.158482] ? blkpg_ioctl+0xa90/0xa90 [ 833.162398] ? trace_hardirqs_on_caller+0x6a/0x220 [ 833.167360] ? finish_task_switch+0x118/0x780 [ 833.171902] ? __fget+0x340/0x540 [ 833.175388] ? ___might_sleep+0x163/0x280 [ 833.179570] block_ioctl+0xee/0x130 [ 833.183221] ? blkdev_fallocate+0x410/0x410 [ 833.187581] do_vfs_ioctl+0xd5f/0x1380 [ 833.191502] ? selinux_file_ioctl+0x46f/0x5e0 [ 833.196028] ? selinux_file_ioctl+0x125/0x5e0 [ 833.200563] ? ioctl_preallocate+0x210/0x210 [ 833.205018] ? selinux_file_mprotect+0x620/0x620 [ 833.209825] ? iterate_fd+0x360/0x360 [ 833.213668] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.219253] ? fput+0x128/0x1a0 [ 833.222580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 833.228927] ? security_file_ioctl+0x8d/0xc0 [ 833.233376] ksys_ioctl+0xab/0xd0 [ 833.236863] __x64_sys_ioctl+0x73/0xb0 [ 833.240784] do_syscall_64+0xfd/0x620 [ 833.244619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.249842] RIP: 0033:0x4597c9 [ 833.253063] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.271998] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.279919] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 833.287209] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 833.294529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.301856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 833.309142] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1f000000, 0x0) 18:06:24 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_getattr(r1, &(0x7f0000000080), 0x30, 0x0) 18:06:24 executing program 3 (fault-call:3 fault-nth:9): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:24 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:24 executing program 1: ioctl(0xffffffffffffffff, 0x100000000000, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) creat(&(0x7f00000000c0)='./bus\x00', 0x8) msgget(0xffffffffffffffff, 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8482) 18:06:24 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5421, r0) 18:06:25 executing program 4: r0 = accept4$rose(0xffffffffffffff9c, &(0x7f0000000000)=@short={0xb, @dev, @bcast, 0x1, @default}, &(0x7f0000000040)=0x1c, 0x800) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x80000, 0x0) sendto$unix(r1, &(0x7f0000000b80)="38aa76c0b4a2caad8fc110a451113b6456c7a03558b5051a252c381b5db675d91c680d4af419f0cbf81f0342b7262d483d73a367ccb846d4f337c4ad5b9ad8f881f2b76debf2a8b625f0989466bd8b3bf867cbbc144b6f7bcff2ac5ec2567eaba09c9363fcc965716e3b3329bd3ef9dc7257c9c5141c5f0c9b3644eb9bf380def821d2f9fdbe6e", 0x87, 0x20004800, &(0x7f0000000a40)=@abs={0x1, 0x0, 0x4e20}, 0xffffffffffffffe2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) pipe(0x0) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/113, 0x71}], 0x3, &(0x7f0000000740)=""/224, 0xe0}, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x210000, 0x0) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:cert_t:s0\x00', 0x1c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000880)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000900)={{0x9, 0x7, 0x0, 0x100, '\x00', 0x10000}, 0x5, 0x3, 0x10001, r3, 0x2, 0xff, 'syz1\x00', &(0x7f00000008c0)=['/dev/cuse\x00', '$\xbe+vmnet0wlan1\x00'], 0x19, [], [0x100000001, 0x7ff, 0x5]}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x5) inotify_init1(0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) add_key(0x0, 0x0, &(0x7f0000000200)="a78f2db87262187dd1548ebf18791278c069023351820efef3b7bbd23a9e4892312b5ca8f6abbf7792ded9a498c587f61eb2c200d69d626ed207de3e6f45bada75d0b9b5331d9383a8191421c593abf9dc458c65c1a9373431e1d8e75100c1dfb0f187fdbc10c16a25eeeea9117ac7ae6cb2104898b248943951c4", 0x7b, 0xfffffffffffffffc) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0) 18:06:25 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 833.619485] FAULT_INJECTION: forcing a failure. [ 833.619485] name failslab, interval 1, probability 0, space 0, times 0 [ 833.637730] CPU: 0 PID: 18074 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 833.644810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.654196] Call Trace: [ 833.656821] dump_stack+0x172/0x1f0 [ 833.660493] should_fail.cold+0xa/0x1b [ 833.664424] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 833.669569] ? lock_downgrade+0x810/0x810 [ 833.673758] ? ___might_sleep+0x163/0x280 [ 833.677954] __should_failslab+0x121/0x190 [ 833.682242] should_failslab+0x9/0x14 [ 833.686094] kmem_cache_alloc+0x2ae/0x700 [ 833.690392] ? kstrdup_const+0x4d/0x80 [ 833.694505] ? __sanitizer_cov_trace_pc+0x20/0x50 [ 833.699403] __kernfs_new_node+0xef/0x680 [ 833.703781] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 833.708600] ? wait_for_completion+0x440/0x440 [ 833.713238] ? mutex_unlock+0xd/0x10 [ 833.716996] ? kernfs_activate+0x192/0x1f0 [ 833.721276] kernfs_new_node+0x99/0x130 [ 833.725299] __kernfs_create_file+0x51/0x340 [ 833.729746] sysfs_add_file_mode_ns+0x222/0x560 [ 833.734461] internal_create_group+0x383/0xc30 [ 833.739084] ? bd_set_size+0x89/0xb0 [ 833.742843] ? remove_files.isra.0+0x190/0x190 [ 833.747485] sysfs_create_group+0x20/0x30 [ 833.751761] lo_ioctl+0xf8f/0x20e0 [ 833.755349] ? lo_rw_aio_complete+0x350/0x350 [ 833.759899] blkdev_ioctl+0xc38/0x1ac0 [ 833.763829] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 833.768650] ? blkpg_ioctl+0xa90/0xa90 [ 833.772594] ? lockdep_hardirqs_on+0x415/0x5d0 [ 833.777214] ? retint_kernel+0x2d/0x2d [ 833.781145] ? trace_hardirqs_on_caller+0x6a/0x220 [ 833.786118] ? __fget+0x340/0x540 [ 833.789607] ? ___might_sleep+0x163/0x280 [ 833.793798] block_ioctl+0xee/0x130 [ 833.797456] ? blkdev_fallocate+0x410/0x410 [ 833.801828] do_vfs_ioctl+0xd5f/0x1380 [ 833.806357] ? selinux_file_ioctl+0x46f/0x5e0 [ 833.810902] ? selinux_file_ioctl+0x125/0x5e0 [ 833.815442] ? ioctl_preallocate+0x210/0x210 [ 833.819885] ? selinux_file_mprotect+0x620/0x620 [ 833.824715] ? iterate_fd+0x360/0x360 [ 833.828549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 833.834130] ? fput+0x128/0x1a0 [ 833.837445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 833.843022] ? security_file_ioctl+0x8d/0xc0 [ 833.847467] ksys_ioctl+0xab/0xd0 [ 833.850990] __x64_sys_ioctl+0x73/0xb0 [ 833.854911] do_syscall_64+0xfd/0x620 [ 833.858747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.863968] RIP: 0033:0x4597c9 [ 833.867191] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.886119] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 833.893885] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 833.901544] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 833.908852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 833.916159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 833.923458] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 [ 834.042935] XFS (loop0): Invalid superblock magic number 18:06:25 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:25 executing program 3 (fault-call:3 fault-nth:10): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:25 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5450, r0) 18:06:25 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000080)=""/61) bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000340)={0x9, 0x7, 0x7, 0x800, 0x12}, 0x2c) io_setup(0x856, &(0x7f0000000480)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3ff, 0x0) syz_mount_image$nfs(&(0x7f00000001c0)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0xfff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="1257f2a69a6e76f0baf1fcd70e4e4af0f611", 0x12, 0x6}], 0x0, &(0x7f00000002c0)='/dev/amidi#\x00') sendto$rxrpc(r1, &(0x7f0000000100)="1bdb2c6046fd4806900855d9fa02cf4f15a95457acba194eead959e972dc9bd51a9abf7a4f54b1d02d10a31422e70f75e292ffdb10ecb38825b62ba5b874035442d231ebfe4d3f91edb0bede7c19d1b7d80690ca8545def7342d432c4cdfdfab33029cdbb923386b541862f20983de90476f161d", 0x74, 0x8091, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000004c0)=""/227) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x9, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x84) 18:06:25 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20000000, 0x0) 18:06:25 executing program 4: ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000080)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) getpgid(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb3) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x6002) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={0x0, 0x7, 0x5, 0x21, &(0x7f0000fee000/0x2000)=nil, 0xc9}) mremap(&(0x7f0000fed000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) [ 834.331540] FAULT_INJECTION: forcing a failure. [ 834.331540] name failslab, interval 1, probability 0, space 0, times 0 [ 834.349188] CPU: 0 PID: 18233 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 834.356429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.365808] Call Trace: [ 834.368435] dump_stack+0x172/0x1f0 [ 834.372096] should_fail.cold+0xa/0x1b [ 834.376015] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 834.381159] ? lock_downgrade+0x810/0x810 [ 834.385343] ? ___might_sleep+0x163/0x280 [ 834.389547] __should_failslab+0x121/0x190 [ 834.393818] should_failslab+0x9/0x14 [ 834.397682] kmem_cache_alloc_trace+0x2cc/0x760 [ 834.402416] ? kobject_uevent_env+0x1b2/0x101d [ 834.407046] kobject_uevent_env+0x387/0x101d [ 834.411501] kobject_uevent+0x20/0x26 [ 834.415345] lo_ioctl+0x100b/0x20e0 [ 834.419041] ? lo_rw_aio_complete+0x350/0x350 [ 834.423585] blkdev_ioctl+0xc38/0x1ac0 [ 834.427515] ? blkpg_ioctl+0xa90/0xa90 [ 834.431442] ? retint_kernel+0x2d/0x2d [ 834.435388] block_ioctl+0xee/0x130 [ 834.439054] ? blkdev_fallocate+0x410/0x410 [ 834.443439] do_vfs_ioctl+0xd5f/0x1380 [ 834.447462] ? ioctl_preallocate+0x210/0x210 [ 834.451919] ? retint_kernel+0x2d/0x2d [ 834.455869] ? security_file_ioctl+0x83/0xc0 [ 834.460332] ? audit_add_tree_rule.cold+0x3d/0x3d [ 834.465218] ? security_file_ioctl+0x8d/0xc0 [ 834.469783] ksys_ioctl+0xab/0xd0 [ 834.473280] __x64_sys_ioctl+0x73/0xb0 [ 834.477202] ? do_syscall_64+0x5b/0x620 [ 834.481219] do_syscall_64+0xfd/0x620 [ 834.485060] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.490452] RIP: 0033:0x4597c9 [ 834.493670] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.512603] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 834.520366] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 834.527835] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 834.535128] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 834.542429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 834.549722] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:26 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5451, r0) 18:06:26 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:26 executing program 3 (fault-call:3 fault-nth:11): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:26 executing program 4: r0 = socket(0xd, 0x2, 0x4000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x20000, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) 18:06:26 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5452, r0) 18:06:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000180)={0x1a0fffffffb, 0x0, @ioapic}) 18:06:26 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 834.808091] XFS (loop0): Invalid superblock magic number [ 834.920280] FAULT_INJECTION: forcing a failure. [ 834.920280] name failslab, interval 1, probability 0, space 0, times 0 [ 834.947595] CPU: 1 PID: 18403 Comm: syz-executor.3 Not tainted 4.19.56 #28 [ 834.954675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.964733] Call Trace: 18:06:26 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x16d) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e20, @multicast1}}) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x3c) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) [ 834.967363] dump_stack+0x172/0x1f0 [ 834.971039] should_fail.cold+0xa/0x1b [ 834.974982] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 834.980134] ? lock_downgrade+0x810/0x810 [ 834.984322] ? ___might_sleep+0x163/0x280 [ 834.988544] __should_failslab+0x121/0x190 [ 834.992822] should_failslab+0x9/0x14 [ 834.996646] kmem_cache_alloc+0x2ae/0x700 [ 835.000823] ? lock_downgrade+0x810/0x810 [ 835.005025] __kernfs_new_node+0xef/0x680 [ 835.009223] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 835.014019] ? wait_for_completion+0x440/0x440 [ 835.018659] ? mutex_unlock+0xd/0x10 [ 835.022420] ? kernfs_activate+0x192/0x1f0 [ 835.026706] kernfs_new_node+0x99/0x130 [ 835.030724] __kernfs_create_file+0x51/0x340 [ 835.035172] sysfs_add_file_mode_ns+0x222/0x560 [ 835.039899] internal_create_group+0x383/0xc30 [ 835.044608] ? bd_set_size+0x89/0xb0 [ 835.048371] ? remove_files.isra.0+0x190/0x190 [ 835.053006] sysfs_create_group+0x20/0x30 [ 835.057194] lo_ioctl+0xf8f/0x20e0 [ 835.060780] ? lo_rw_aio_complete+0x350/0x350 [ 835.065321] blkdev_ioctl+0xc38/0x1ac0 [ 835.069366] ? blkpg_ioctl+0xa90/0xa90 [ 835.073292] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 835.078090] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 835.082979] ? __fget+0x340/0x540 [ 835.086480] ? ___might_sleep+0x163/0x280 [ 835.090675] block_ioctl+0xee/0x130 [ 835.094349] ? blkdev_fallocate+0x410/0x410 [ 835.099002] do_vfs_ioctl+0xd5f/0x1380 [ 835.102937] ? selinux_file_ioctl+0x46f/0x5e0 [ 835.107484] ? selinux_file_ioctl+0x125/0x5e0 [ 835.112029] ? ioctl_preallocate+0x210/0x210 [ 835.116480] ? selinux_file_mprotect+0x620/0x620 [ 835.121283] ? iterate_fd+0x360/0x360 [ 835.125213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 835.130787] ? fput+0x128/0x1a0 [ 835.134112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 835.139695] ? security_file_ioctl+0x8d/0xc0 [ 835.144144] ksys_ioctl+0xab/0xd0 [ 835.147664] __x64_sys_ioctl+0x73/0xb0 [ 835.151598] do_syscall_64+0xfd/0x620 [ 835.155443] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 835.160673] RIP: 0033:0x4597c9 [ 835.163893] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 835.182821] RSP: 002b:00007f1d95552c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 835.190595] RAX: ffffffffffffffda RBX: 00007f1d95552c90 RCX: 00000000004597c9 [ 835.197893] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 835.205224] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 835.213077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d955536d4 [ 835.220375] R13: 00000000004c2e9e R14: 00000000004d62c0 R15: 0000000000000006 18:06:26 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5460, r0) 18:06:26 executing program 3 (fault-call:3 fault-nth:12): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) [ 835.299128] kvm: apic: phys broadcast and lowest prio 18:06:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20030000, 0x0) 18:06:26 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:26 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f6800fe01b2a4a280930a060001fe800002040008003900090035005000140000001900054003020000000022ff0700000010000084136ef75afb83de4400000000c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 18:06:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x80000001006, &(0x7f00000001c0)={0x3}, 0xe6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x4a, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x8176, 0x0, 0x0, 0x800e00546) shutdown(r0, 0x0) 18:06:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:26 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r0) 18:06:26 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:27 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, r0) [ 835.546429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.553618] IPv6: NLM_F_CREATE should be set when creating new route [ 835.560268] IPv6: NLM_F_CREATE should be set when creating new route 18:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x2, r0) 18:06:27 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\xcd\x94\xa4\x84\x00\b\x00\x00\x00\x00\x00\x00]\v\xbf\x9a\xcb') r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='mem\x00\x01y7swaS.cur\x89\xc9B\xab\xe3\xfarent\x00', 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB]], 0x0) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x24) ftruncate(r3, 0x208200) sysfs$2(0x2, 0x9824, &(0x7f0000000280)=""/216) r4 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r4, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000240)) preadv(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) setfsgid(0x0) syz_genetlink_get_family_id$net_dm(0xfffffffffffffffe) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@multicast1}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x2}}, 0xe8) socket$alg(0x26, 0x5, 0x0) 18:06:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 18:06:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x22000000, 0x0) 18:06:27 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40086602, r0) 18:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x301, r0) 18:06:27 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:27 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmmsg$unix(r2, &(0x7f00000012c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [r0, r0]}}], 0x14}], 0x1, 0x0) dup2(r2, r1) 18:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125d, r0) 18:06:27 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40087602, r0) 18:06:27 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:27 executing program 4: getpid() gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x81, @ipv4={[], [], @broadcast}}}}, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x8003f1) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="0009000000000000ffffffff00000000000000000200"]) socketpair$unix(0x1, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f00000000c0)=[{}], 0x1, 0xffffffffffbffff8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, 0x0) fadvise64(r2, 0x0, 0x3f, 0x1) [ 836.066695] XFS (loop0): Invalid superblock magic number 18:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125e, r0) 18:06:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) [ 836.200906] audit: type=1804 audit(1562090787.582:161): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=16603 res=1 18:06:27 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40101283, r0) 18:06:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x23000000, 0x0) 18:06:27 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x125f, r0) [ 836.410281] audit: type=1800 audit(1562090787.792:162): pid=18894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16603 res=0 18:06:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) 18:06:27 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401070c9, r0) 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1260, r0) [ 836.583775] XFS (loop0): Invalid superblock magic number 18:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/243, 0xf3}], 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) readv(r2, &(0x7f0000001a00)=[{&(0x7f0000000080)=""/33, 0x21}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401070ca, r0) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1261, r0) 18:06:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2c000000, 0x0) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401070cd, r0) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) mkdir(&(0x7f0000000240)='./control\x00', 0x0) 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1262, r0) 18:06:28 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401870c8, r0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401870cb, r0) [ 836.993716] XFS (loop0): Invalid superblock magic number 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1263, r0) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3f000000, 0x0) 18:06:28 executing program 4: r0 = open(&(0x7f0000000440)='./file0\x00', 0x143042, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0xbb985ab9) keyctl$session_to_parent(0x12) write$P9_RATTACH(r0, 0x0, 0x352) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x401870cc, r0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1264, r0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) pipe(&(0x7f0000000040)) 18:06:28 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4020940d, r0) 18:06:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1265, r0) 18:06:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:28 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) shutdown(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000001a00)=[{&(0x7f0000000080)=""/33, 0x21}], 0x1) shutdown(r2, 0x0) [ 837.426438] XFS (loop0): Invalid superblock magic number 18:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x3fffffff, 0x0) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80081270, r0) 18:06:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1267, r0) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80081272, r0) 18:06:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1268, r0) 18:06:29 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000500)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x40000000, 0x0) 18:06:29 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80086601, r0) 18:06:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1269, r0) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:29 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) [ 837.997788] XFS (loop0): Invalid superblock magic number 18:06:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1274, r0) 18:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x42534658, 0x0) 18:06:29 executing program 4: pipe(&(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, &(0x7f0000000500)) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) shmget(0x2, 0x3000, 0x78000041, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x80087601, r0) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:29 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0045878, r0) 18:06:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x48000000, 0x0) 18:06:29 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1276, r0) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:29 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0045878, r0) 18:06:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:29 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 838.456444] XFS (loop0): Invalid superblock magic number 18:06:30 executing program 4: 18:06:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:30 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0101282, r0) 18:06:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1277, r0) 18:06:30 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4c000000, 0x0) 18:06:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1278, r0) 18:06:30 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:30 executing program 4: 18:06:30 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0189436, r0) 18:06:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) [ 839.208312] XFS (loop0): Invalid superblock magic number 18:06:30 executing program 4: 18:06:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x1279, r0) 18:06:30 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc020660b, r0) 18:06:30 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x50010000, 0x0) 18:06:30 executing program 4: 18:06:30 executing program 4: 18:06:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127a, r0) 18:06:30 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0xc0481273, r0) 18:06:30 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:31 executing program 4: 18:06:31 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127b, r0) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) [ 839.673098] XFS (loop0): Invalid superblock magic number 18:06:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x53000000, 0x0) 18:06:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x29}, 0x10) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 18:06:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x9, 0x80e1, 0xfffffffffffffffb}) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x240400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127c, r0) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:31 executing program 4: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127d, r0) 18:06:31 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0xe312, 0x7) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f00000000c0)={0xc0, "9be3f5535f21ef49637eb59ad7288ba40f9a3f2419feb1208dd3e8367d35b5f87996451ac05b90991791473f4f505d05a50710c3c86ee0d770d53d2612b0752ca4afeea7b98889a0357826466737b0320016ec985ad99ef1edd651439040f54112c83990e5b03daa2db6aa3526c4abfbf8a3a5a7edf4e42c70ce38fac33e97df3143eef28529ac4b6ea9e4115a05df36c73534ab654e43070b263a34aaf0b886919bd572ac8088a98ffd6f0ed46254aabe7932022de4408cc27256c0e70ace45"}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) syz_read_part_table(0x5, 0x3, &(0x7f0000000480)=[{&(0x7f0000000300)="eee6d8ef6c1b267a0ae4d573ecf23e568358", 0x12}, {&(0x7f0000000340)="68bc337d709d77818130a8bda5c9b7fb79fe7c405be0b6cd8bb0748ce5a0a0f7d19e7f152096bdc9c59d9832cc063604987b0293e198ce8da6831bf3afa1f62a0b593f2e1e42fc0652020454ffd53da792ae470ac6797b28126d868060d6120580aec81ce92f22c5366502888fed10e73b273b493d6e8e7b970f8c624c865ceb56aa98e25bcea106a4f176e379f4b348caec643e9a1799aa91acf11e15cf602e764968091e49bd976a649b959fd126a710f157173d0c3c33aff1a5179829e454704aeaba430fa7c1f1657f370281d29558759a", 0xd3, 0x1}, {&(0x7f0000000440)="f8d71580", 0x4, 0x20}]) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000200)=""/211) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) [ 840.158510] XFS (loop0): Invalid superblock magic number 18:06:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x58465342, 0x0) 18:06:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:31 executing program 4: socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) syz_genetlink_get_family_id$net_dm(0xfffffffffffffffe) 18:06:31 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127e, r0) 18:06:31 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127f, r0) 18:06:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 18:06:31 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 18:06:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/250, 0xfa}, {0x0}], 0x2}, 0x0) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r5, &(0x7f0000000980)={0x0, 0x175, &(0x7f0000000480)=[{&(0x7f0000000000)=""/248, 0xf8}], 0x1000000000000255}, 0x0) r6 = dup(r5) r7 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r7, 0x0, 0xfd1d, 0x0, 0x0, 0x800e0053d) shutdown(r6, 0x0) r8 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r8, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1) shutdown(r7, 0x0) shutdown(r4, 0x0) r9 = dup(r2) shutdown(r9, 0x0) 18:06:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4b47, r0) 18:06:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x60000000, 0x0) 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[], 0x0) 18:06:32 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) fstatfs(r0, &(0x7f00000000c0)=""/203) 18:06:32 executing program 4: r0 = memfd_create(&(0x7f0000000040)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4b49, r0) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[], 0x0) 18:06:32 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xb, 0x505b02) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c01, r0) [ 840.917636] XFS (loop0): Invalid superblock magic number 18:06:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x60010000, 0x0) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[], 0x0) 18:06:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c02, r0) 18:06:32 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4400, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)={0x8d98, 0x2, 0x2, 0x0, 0x0, [{r1, 0x0, 0x3d}, {r0, 0x0, 0x3}]}) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) 18:06:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getpeername$llc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) 18:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c03, r0) 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) [ 841.253390] XFS (loop0): Invalid superblock magic number 18:06:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x68000000, 0x0) 18:06:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1) 18:06:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c04, r0) 18:06:32 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x480100, 0x0) 18:06:32 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379"], 0x1) 18:06:33 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x804, 0x8000010000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xe3a}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r3, @in={{0x2, 0x4e23, @rand_addr=0x7}}, 0x20, 0x5, 0x4, 0xffffffffffffffc1, 0x92}, &(0x7f0000000200)=0x98) 18:06:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c05, r0) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379"], 0x1) [ 841.623990] XFS (loop0): Invalid superblock magic number 18:06:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6b6b6b00, 0x0) 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379"], 0x1) 18:06:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 18:06:33 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10100, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab3"], 0x1) 18:06:33 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x40000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000000c0)={0x5, 0x0, [], {0x0, @reserved}}) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x6c000000, 0x0) 18:06:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c07, r0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab3"], 0x1) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:33 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x400000) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000000c0)={0x6, 0xfff}) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/187) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c09, r0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab3"], 0x1) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) [ 842.319306] XFS (loop0): Invalid superblock magic number 18:06:33 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r1, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000300, 0x0) 18:06:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x70030000, 0x0) 18:06:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c48, r0) 18:06:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e00000670"], 0x1) 18:06:33 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7fffffff, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r1, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000300, 0x0) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e00000670"], 0x1) 18:06:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c4c, r0) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r1, 0x4, 0x2000) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000300, 0x0) 18:06:34 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000180)='/dev/md0\x00', 0x34802f1b35b3e178, 0x0) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x74000000, 0x0) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e00000670"], 0x1) 18:06:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c68, r0) 18:06:34 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x400000, 0x101000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:34 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004040)={{{@in=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000004140)=0xe8) bind$can_raw(r0, &(0x7f0000004180)={0x1d, r1}, 0x10) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x7, 0x0, [{0x0, 0x3, 0x0, 0x0, @msi={0x59c, 0x7, 0x3}}, {0x7, 0x4, 0x0, 0x0, @msi={0x6, 0x100000000, 0x4}}, {0x10000, 0x3, 0x0, 0x0, @irqchip={0x5, 0x5}}, {0x1, 0x3, 0x0, 0x0, @msi={0x7fffffff, 0x4, 0xc7}}, {0x1f, 0x1, 0x0, 0x0, @irqchip={0x800, 0xffff}}, {0x10000, 0x2, 0x0, 0x0, @sint={0x53ed70fd, 0x2d}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x2f, 0xff, 0x3ff, 0x80000000, 0x1ff}}]}) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b987"], 0x1) 18:06:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c6c, r0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b987"], 0x1) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) [ 843.090152] XFS (loop0): Invalid superblock magic number 18:06:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7a000000, 0x0) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000300, 0x0) 18:06:34 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/ip_vs\x00') fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+'}, 0x28, 0x2) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000140)=""/22, &(0x7f0000000180)=0x16) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x20000, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r2) 18:06:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c74, r0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b987"], 0x1) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) close(r0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 18:06:34 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 18:06:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c7a, r0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b67848"], 0x1) 18:06:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80010000, 0x0) 18:06:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b67848"], 0x1) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 18:06:34 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) r2 = msgget(0x2, 0x8) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000000c0)) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000300)=""/146) 18:06:34 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) 18:06:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x541b, r0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b67848"], 0x1) 18:06:35 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c02, r0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db"], 0x1) 18:06:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5421, r0) 18:06:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80020000, 0x0) 18:06:35 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[], 0x39) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000000c0)={0x1a, 0x10001, 0x3, 0x2, 0x8, 0x101, 0x50}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:35 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5450, r0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db"], 0x1) 18:06:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c02, r0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db"], 0x1) 18:06:35 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) signalfd4(r0, &(0x7f0000000040)={0x8}, 0x8, 0x80000) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:35 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80030000, 0x0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874"], 0x1) 18:06:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5451, r0) 18:06:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x127f, r0) 18:06:35 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, &(0x7f0000002540)=0x6337) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874"], 0x1) 18:06:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x80969800, 0x0) 18:06:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 18:06:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5452, r0) 18:06:35 executing program 4: close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 18:06:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874"], 0x1) 18:06:35 executing program 5 (fault-call:9 fault-nth:0): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:35 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 18:06:36 executing program 1 (fault-call:2 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x5460, r0) 18:06:36 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)=""/79, &(0x7f0000000140)=0x4f) openat(r2, &(0x7f0000000180)='./file0\x00', 0x46200, 0x20) 18:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8cffffff, 0x0) 18:06:36 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) [ 844.653329] FAULT_INJECTION: forcing a failure. [ 844.653329] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 844.690176] FAULT_INJECTION: forcing a failure. [ 844.690176] name failslab, interval 1, probability 0, space 0, times 0 [ 844.739751] CPU: 0 PID: 20990 Comm: syz-executor.1 Not tainted 4.19.56 #28 [ 844.746819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.756212] Call Trace: [ 844.758846] dump_stack+0x172/0x1f0 [ 844.762611] should_fail.cold+0xa/0x1b [ 844.766540] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 844.771676] ? lock_downgrade+0x810/0x810 [ 844.775852] ? ___might_sleep+0x163/0x280 [ 844.780035] __should_failslab+0x121/0x190 [ 844.784312] should_failslab+0x9/0x14 [ 844.788139] kmem_cache_alloc_node_trace+0x274/0x720 [ 844.793279] ? lock_downgrade+0x810/0x810 [ 844.797456] __kmalloc_node+0x3d/0x80 [ 844.801288] kvmalloc_node+0xbd/0x100 [ 844.805183] xt_alloc_table_info+0x41/0xa0 [ 844.809519] do_ipt_set_ctl+0x25a/0x492 [ 844.813533] ? compat_do_ipt_set_ctl+0x160/0x160 [ 844.818330] ? mutex_unlock+0xd/0x10 [ 844.822086] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 844.827426] nf_setsockopt+0x77/0xd0 [ 844.831180] ip_setsockopt+0xdf/0x100 [ 844.835016] udp_setsockopt+0x68/0xb0 [ 844.838919] ipv6_setsockopt+0xb6/0x170 [ 844.842936] tcp_setsockopt+0x8f/0xe0 [ 844.846848] sock_common_setsockopt+0x94/0xd0 [ 844.851386] __sys_setsockopt+0x17a/0x280 [ 844.855598] ? kernel_accept+0x310/0x310 [ 844.859701] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 844.864486] ? do_syscall_64+0x26/0x620 [ 844.868486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.873877] ? do_syscall_64+0x26/0x620 [ 844.877890] __x64_sys_setsockopt+0xbe/0x150 [ 844.882330] do_syscall_64+0xfd/0x620 [ 844.886157] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 844.891366] RIP: 0033:0x4597c9 [ 844.894590] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 844.913509] RSP: 002b:00007fa194f5ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 844.921247] RAX: ffffffffffffffda RBX: 00007fa194f5ec90 RCX: 00000000004597c9 [ 844.928713] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 18:06:36 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x400) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) fchmod(r2, 0x20) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x0, 0x7, 0x0, 0x80}, 0x3ff, 0x0, 0xffff}) [ 844.936113] RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 [ 844.943404] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fa194f5f6d4 [ 844.950695] R13: 00000000004c775d R14: 00000000004dcf08 R15: 0000000000000004 [ 844.962213] CPU: 1 PID: 20987 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 844.969268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 844.978813] Call Trace: [ 844.978911] dump_stack+0x172/0x1f0 [ 844.978933] should_fail.cold+0xa/0x1b 18:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r0) [ 844.978954] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 844.994205] __alloc_pages_nodemask+0x1ee/0x760 [ 844.998918] ? __alloc_pages_slowpath+0x2870/0x2870 [ 845.003970] ? mark_held_locks+0x100/0x100 [ 845.008238] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 845.013815] alloc_pages_current+0x107/0x210 [ 845.018269] skb_page_frag_refill+0x277/0x460 [ 845.022804] sk_page_frag_refill+0x55/0x1f0 [ 845.027156] sk_alloc_sg+0x14c/0x790 [ 845.027179] ? trace_hardirqs_on+0x67/0x220 [ 845.027268] alloc_encrypted_sg+0x8d/0x110 [ 845.035267] tls_sw_sendpage+0x644/0xd40 [ 845.043625] ? tls_sw_sendmsg+0x1220/0x1220 [ 845.047989] ? pipe_lock+0x6e/0x80 [ 845.051568] ? tls_sw_sendmsg+0x1220/0x1220 [ 845.055949] inet_sendpage+0x168/0x630 [ 845.059909] kernel_sendpage+0x92/0xf0 [ 845.063823] ? inet_sendmsg+0x5d0/0x5d0 [ 845.067829] sock_sendpage+0x8b/0xc0 [ 845.071585] pipe_to_sendpage+0x296/0x360 [ 845.075765] ? kernel_sendpage+0xf0/0xf0 [ 845.079866] ? direct_splice_actor+0x190/0x190 [ 845.084494] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.090067] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 845.095515] __splice_from_pipe+0x391/0x7d0 [ 845.099875] ? direct_splice_actor+0x190/0x190 [ 845.104494] ? direct_splice_actor+0x190/0x190 [ 845.109105] splice_from_pipe+0x108/0x170 [ 845.113275] ? splice_shrink_spd+0xd0/0xd0 [ 845.117537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.123093] ? security_file_permission+0x89/0x230 [ 845.128032] generic_splice_sendpage+0x3c/0x50 [ 845.132631] ? splice_from_pipe+0x170/0x170 [ 845.136975] do_splice+0x642/0x12c0 [ 845.140632] ? opipe_prep.part.0+0x2d0/0x2d0 [ 845.145069] ? __fget_light+0x1a9/0x230 [ 845.149088] __x64_sys_splice+0x2c6/0x330 [ 845.153276] do_syscall_64+0xfd/0x620 [ 845.157095] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.162302] RIP: 0033:0x4597c9 [ 845.165508] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:06:36 executing program 1 (fault-call:2 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:36 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) [ 845.184463] RSP: 002b:00007f0c59527c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 845.192210] RAX: ffffffffffffffda RBX: 00007f0c59527c90 RCX: 00000000004597c9 [ 845.199534] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 845.206833] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 845.214135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c595286d4 [ 845.221412] R13: 00000000004c8d54 R14: 00000000004def30 R15: 0000000000000005 18:06:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x400001000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x98030000, 0x0) 18:06:36 executing program 5 (fault-call:9 fault-nth:1): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[], 0x39) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "658bdce8f16b6901", "9fae1947fe62576d6d7573c55f795e68", "a43cc80d", "ca90bc29c8f91cf6"}, 0x28) fcntl$setstatus(r2, 0x4, 0x2000) splice(r0, 0x0, r1, 0x0, 0x100000300, 0x0) 18:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40081271, r0) 18:06:36 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4080, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x6, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r0) [ 845.340199] FAULT_INJECTION: forcing a failure. [ 845.340199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:06:36 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) [ 845.388596] FAULT_INJECTION: forcing a failure. [ 845.388596] name failslab, interval 1, probability 0, space 0, times 0 18:06:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x403f, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xffff, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x40086602, r0) [ 845.438059] CPU: 1 PID: 21114 Comm: syz-executor.1 Not tainted 4.19.56 #28 [ 845.445115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.454502] Call Trace: [ 845.457130] dump_stack+0x172/0x1f0 [ 845.460806] should_fail.cold+0xa/0x1b [ 845.464733] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 845.469858] ? ___might_sleep+0x163/0x280 [ 845.474036] ? __might_sleep+0x95/0x190 [ 845.478040] __alloc_pages_nodemask+0x1ee/0x760 [ 845.482750] ? __alloc_pages_slowpath+0x2870/0x2870 [ 845.487850] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 845.493421] alloc_pages_current+0x107/0x210 [ 845.497904] pte_alloc_one+0x1b/0x1a0 [ 845.501746] do_huge_pmd_anonymous_page+0xa21/0x14e0 [ 845.506890] ? __lock_acquire+0x6eb/0x48f0 [ 845.511169] ? __thp_get_unmapped_area+0x190/0x190 [ 845.516136] ? __pmd+0x60/0x60 [ 845.519372] __handle_mm_fault+0x2c80/0x3f80 [ 845.523820] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 845.528692] ? find_held_lock+0x35/0x130 [ 845.532786] ? handle_mm_fault+0x322/0xb30 [ 845.537070] ? kasan_check_read+0x11/0x20 [ 845.541252] handle_mm_fault+0x43f/0xb30 [ 845.545357] __do_page_fault+0x62a/0xe90 [ 845.549460] ? vmalloc_fault+0x740/0x740 [ 845.553561] ? trace_hardirqs_off_caller+0x65/0x220 [ 845.558619] do_page_fault+0x71/0x57d [ 845.562456] page_fault+0x1e/0x30 [ 845.565946] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 845.571883] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 845.590814] RSP: 0018:ffff8880a085fb60 EFLAGS: 00010206 [ 845.596294] RAX: 0000000000000000 RBX: 0000000000231b00 RCX: 0000000000031d60 [ 845.603588] RDX: 0000000000231b00 RSI: 0000000020200000 RDI: ffff88801e5ffde0 [ 845.610899] RBP: ffff8880a085fb98 R08: ffffed1003cc6368 R09: 0000000000000000 [ 845.618196] R10: ffffed1003cc6367 R11: ffff88801e631b3f R12: 0000000020000260 [ 845.625578] R13: 0000000020231d60 R14: ffff88801e400040 R15: 00007ffffffff000 [ 845.632907] ? _copy_from_user+0x10b/0x150 [ 845.637199] do_ipt_set_ctl+0x29d/0x492 [ 845.641210] ? compat_do_ipt_set_ctl+0x160/0x160 [ 845.646014] ? mutex_unlock+0xd/0x10 [ 845.649769] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 845.655088] nf_setsockopt+0x77/0xd0 [ 845.658837] ip_setsockopt+0xdf/0x100 [ 845.662679] udp_setsockopt+0x68/0xb0 [ 845.666520] ipv6_setsockopt+0xb6/0x170 [ 845.670530] tcp_setsockopt+0x8f/0xe0 [ 845.674368] sock_common_setsockopt+0x94/0xd0 [ 845.678899] __sys_setsockopt+0x17a/0x280 [ 845.683094] ? kernel_accept+0x310/0x310 [ 845.687220] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 845.692012] ? do_syscall_64+0x26/0x620 [ 845.696014] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.701419] ? do_syscall_64+0x26/0x620 [ 845.705523] __x64_sys_setsockopt+0xbe/0x150 [ 845.709979] do_syscall_64+0xfd/0x620 [ 845.713823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 845.719035] RIP: 0033:0x4597c9 [ 845.722254] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 845.741177] RSP: 002b:00007fa194f5ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 845.748919] RAX: ffffffffffffffda RBX: 00007fa194f5ec90 RCX: 00000000004597c9 [ 845.756214] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 845.763512] RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 [ 845.770836] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fa194f5f6d4 [ 845.778147] R13: 00000000004c775d R14: 00000000004dcf08 R15: 0000000000000004 [ 845.788768] CPU: 0 PID: 21116 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 845.796010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 845.805381] Call Trace: [ 845.808019] dump_stack+0x172/0x1f0 [ 845.811689] should_fail.cold+0xa/0x1b [ 845.815610] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 845.820755] ? lock_downgrade+0x810/0x810 [ 845.824939] ? ___might_sleep+0x163/0x280 [ 845.829131] __should_failslab+0x121/0x190 [ 845.833492] should_failslab+0x9/0x14 [ 845.837621] __kmalloc+0x2e2/0x750 [ 845.841290] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.846861] ? __sk_mem_schedule+0xac/0xe0 [ 845.851130] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 845.856697] ? tls_push_record+0x107/0x13a0 [ 845.861057] tls_push_record+0x107/0x13a0 [ 845.865252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.870819] ? alloc_encrypted_sg+0xa8/0x110 [ 845.875263] tls_sw_sendpage+0x540/0xd40 [ 845.879393] ? tls_sw_sendmsg+0x1220/0x1220 [ 845.883750] ? pipe_lock+0x6e/0x80 [ 845.888978] ? tls_sw_sendmsg+0x1220/0x1220 [ 845.893427] inet_sendpage+0x168/0x630 [ 845.897362] kernel_sendpage+0x92/0xf0 [ 845.901276] ? inet_sendmsg+0x5d0/0x5d0 [ 845.905280] sock_sendpage+0x8b/0xc0 [ 845.909037] pipe_to_sendpage+0x296/0x360 [ 845.913221] ? kernel_sendpage+0xf0/0xf0 [ 845.917326] ? direct_splice_actor+0x190/0x190 [ 845.921977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.927557] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 845.932985] __splice_from_pipe+0x391/0x7d0 [ 845.937348] ? direct_splice_actor+0x190/0x190 [ 845.941982] ? direct_splice_actor+0x190/0x190 [ 845.946600] splice_from_pipe+0x108/0x170 [ 845.950796] ? splice_shrink_spd+0xd0/0xd0 [ 845.955085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 845.960668] ? security_file_permission+0x89/0x230 [ 845.965643] generic_splice_sendpage+0x3c/0x50 [ 845.970285] ? splice_from_pipe+0x170/0x170 [ 845.974730] do_splice+0x642/0x12c0 [ 845.978400] ? opipe_prep.part.0+0x2d0/0x2d0 [ 845.982844] ? __fget_light+0x1a9/0x230 [ 845.986851] __x64_sys_splice+0x2c6/0x330 [ 845.991119] do_syscall_64+0xfd/0x620 [ 845.994986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.000193] RIP: 0033:0x4597c9 [ 846.003404] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.022415] RSP: 002b:00007f0c59527c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 846.030158] RAX: ffffffffffffffda RBX: 00007f0c59527c90 RCX: 00000000004597c9 18:06:37 executing program 1 (fault-call:2 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="6e61853100022200000100000000000000000000e4dbb77487e90100000001fab100000000000000001b2300000503000018030000cc000000ac010000000000001004d1e00900000000000000f34f8dfaffffffff00000000e7b8bbb76cab1004000010040002d32379b87c5ade6e68b60800000000000000f2d3c00f4072e211777424c9814f1f852110e5d4620b060000006b63012812d04b94d660aab341cfe8d68c22b866cd445d5d0f4d6715ba085900323e000006700083d1c7cfd3f37bbf2c96b98714748223b678487412db8874e0"], 0x1) 18:06:37 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) [ 846.037450] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.044739] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 846.052120] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c595286d4 [ 846.059431] R13: 00000000004c8d54 R14: 00000000004def30 R15: 0000000000000005 [ 846.133049] kasan: CONFIG_KASAN_INLINE enabled [ 846.134259] FAULT_INJECTION: forcing a failure. [ 846.134259] name failslab, interval 1, probability 0, space 0, times 0 [ 846.138210] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 846.138275] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 846.163107] CPU: 0 PID: 21116 Comm: syz-executor.5 Not tainted 4.19.56 #28 [ 846.170249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.170572] CPU: 1 PID: 21134 Comm: syz-executor.1 Not tainted 4.19.56 #28 [ 846.179733] RIP: 0010:gcmaes_crypt_by_sg.constprop.0+0xde2/0x1850 [ 846.186656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 846.192896] Code: 82 f3 f9 ff ff e8 6e ac 35 00 4c 89 f7 e8 c6 c7 eb 01 48 8d 78 08 49 89 c6 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a5 09 00 00 41 8b 46 08 89 84 [ 846.202244] Call Trace: [ 846.221174] RSP: 0018:ffff88804053f230 EFLAGS: 00010202 [ 846.223775] dump_stack+0x172/0x1f0 [ 846.223796] should_fail.cold+0xa/0x1b [ 846.229160] RAX: dffffc0000000000 RBX: 0000000000000056 RCX: ffffc900108c4000 [ 846.232801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 846.236677] RDX: 0000000000000001 RSI: ffffffff8321329b RDI: 0000000000000008 [ 846.243963] ? lock_downgrade+0x810/0x810 [ 846.249092] RBP: ffff88804053f570 R08: ffff88808af3a6c0 R09: 000000000000000d [ 846.256396] ? ___might_sleep+0x163/0x280 [ 846.260532] R10: ffff8880a7a26040 R11: 0000000000000010 R12: 0000000000000000 [ 846.267819] __should_failslab+0x121/0x190 [ 846.271959] R13: 0000000000000056 R14: 0000000000000000 R15: 0000000000000029 [ 846.279247] should_failslab+0x9/0x14 [ 846.283475] FS: 00007f0c59528700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 846.290759] kmem_cache_alloc+0x2ae/0x700 [ 846.294549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.303051] ? __lock_is_held+0xb6/0x140 [ 846.307190] CR2: 0000001b31c21000 CR3: 00000000a924f000 CR4: 00000000001406f0 [ 846.313092] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 846.317136] Call Trace: [ 846.324427] ptlock_alloc+0x20/0x70 [ 846.330510] ? aesni_gcm_enc_avx2+0x170/0x170 [ 846.333089] pte_alloc_one+0x6d/0x1a0 [ 846.336713] ? is_bpf_text_address+0xac/0x170 [ 846.341210] do_huge_pmd_anonymous_page+0xa21/0x14e0 [ 846.345015] ? find_held_lock+0x35/0x130 [ 846.349530] ? __lock_acquire+0x6eb/0x48f0 [ 846.354638] ? is_bpf_text_address+0xac/0x170 [ 846.358712] ? find_held_lock+0x35/0x130 [ 846.362962] ? unwind_get_return_address+0x61/0xa0 [ 846.367477] ? __thp_get_unmapped_area+0x190/0x190 [ 846.371533] ? __save_stack_trace+0x99/0x100 [ 846.376463] ? __pmd+0x60/0x60 [ 846.381405] gcmaes_encrypt.constprop.0+0x62a/0xd90 [ 846.385817] __handle_mm_fault+0x2c80/0x3f80 [ 846.389019] ? save_stack+0x45/0xd0 [ 846.394045] ? vmf_insert_mixed_mkwrite+0x90/0x90 [ 846.398453] ? kasan_kmalloc+0xce/0xf0 [ 846.402081] ? find_held_lock+0x35/0x130 [ 846.407092] ? __kmalloc+0x15d/0x750 [ 846.410997] ? handle_mm_fault+0x322/0xb30 [ 846.415071] ? tls_push_record+0x107/0x13a0 [ 846.418787] ? kasan_check_read+0x11/0x20 [ 846.423032] ? tls_sw_sendpage+0x540/0xd40 [ 846.427355] handle_mm_fault+0x43f/0xb30 [ 846.431492] ? inet_sendpage+0x168/0x630 [ 846.431511] ? kernel_sendpage+0x92/0xf0 [ 846.436240] __do_page_fault+0x62a/0xe90 [ 846.440294] ? generic_gcmaes_decrypt+0x160/0x160 [ 846.444352] ? vmalloc_fault+0x740/0x740 [ 846.448406] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.452477] ? trace_hardirqs_off_caller+0x65/0x220 [ 846.457309] ? mark_held_locks+0x100/0x100 [ 846.461368] do_page_fault+0x71/0x57d [ 846.466728] ? remove_wait_queue+0x10f/0x190 [ 846.471748] page_fault+0x1e/0x30 [ 846.475987] ? find_held_lock+0x35/0x130 [ 846.479782] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 846.484179] ? fs_reclaim_acquire+0x20/0x20 [ 846.487618] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 846.491701] ? __lock_is_held+0xb6/0x140 [ 846.497571] RSP: 0018:ffff8880991cfb60 EFLAGS: 00010206 [ 846.501904] ? should_fail+0x14d/0x85c [ 846.524976] generic_gcmaes_encrypt+0x108/0x159 [ 846.530338] RAX: 0000000000000000 RBX: 0000000000231b00 RCX: 0000000000031d60 [ 846.534243] ? generic_gcmaes_encrypt+0x108/0x159 [ 846.538913] RDX: 0000000000231b00 RSI: 0000000020200000 RDI: ffff88801e5ffde0 [ 846.546207] ? helper_rfc4106_encrypt+0x390/0x390 [ 846.551038] RBP: ffff8880991cfb98 R08: ffffed1003cc6368 R09: 0000000000000000 [ 846.558340] ? __kmalloc+0x5e1/0x750 [ 846.563190] R10: ffffed1003cc6367 R11: ffff88801e631b3f R12: 0000000020000260 [ 846.570481] gcmaes_wrapper_encrypt+0x15f/0x200 [ 846.574202] R13: 0000000020231d60 R14: ffff88801e400040 R15: 00007ffffffff000 [ 846.581496] tls_push_record+0x9c0/0x13a0 [ 846.586162] ? _copy_from_user+0x10b/0x150 [ 846.593526] tls_sw_sendpage+0x540/0xd40 [ 846.597680] do_ipt_set_ctl+0x29d/0x492 [ 846.601940] ? tls_sw_sendmsg+0x1220/0x1220 [ 846.606276] ? compat_do_ipt_set_ctl+0x160/0x160 [ 846.610265] ? pipe_lock+0x6e/0x80 [ 846.614870] ? mutex_unlock+0xd/0x10 [ 846.619632] ? tls_sw_sendmsg+0x1220/0x1220 [ 846.623179] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 846.626915] inet_sendpage+0x168/0x630 [ 846.631246] nf_setsockopt+0x77/0xd0 [ 846.636543] kernel_sendpage+0x92/0xf0 [ 846.640441] ip_setsockopt+0xdf/0x100 [ 846.644248] ? inet_sendmsg+0x5d0/0x5d0 [ 846.648160] udp_setsockopt+0x68/0xb0 [ 846.651963] sock_sendpage+0x8b/0xc0 [ 846.655951] ipv6_setsockopt+0xb6/0x170 [ 846.659753] pipe_to_sendpage+0x296/0x360 [ 846.663466] tcp_setsockopt+0x8f/0xe0 [ 846.667445] ? kernel_sendpage+0xf0/0xf0 [ 846.671597] sock_common_setsockopt+0x94/0xd0 [ 846.675397] ? direct_splice_actor+0x190/0x190 [ 846.679482] __sys_setsockopt+0x17a/0x280 [ 846.683989] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.688780] ? kernel_accept+0x310/0x310 [ 846.692934] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 846.698482] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 846.702683] __splice_from_pipe+0x391/0x7d0 [ 846.708230] ? do_syscall_64+0x26/0x620 [ 846.713019] ? direct_splice_actor+0x190/0x190 [ 846.717340] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.721320] ? direct_splice_actor+0x190/0x190 [ 846.725988] ? do_syscall_64+0x26/0x620 [ 846.731712] splice_from_pipe+0x108/0x170 [ 846.736295] __x64_sys_setsockopt+0xbe/0x150 [ 846.740266] ? splice_shrink_spd+0xd0/0xd0 [ 846.744432] do_syscall_64+0xfd/0x620 [ 846.748841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 846.753094] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.756897] ? security_file_permission+0x89/0x230 [ 846.762604] RIP: 0033:0x4597c9 [ 846.767810] generic_splice_sendpage+0x3c/0x50 [ 846.772731] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.775948] ? splice_from_pipe+0x170/0x170 [ 846.781673] RSP: 002b:00007fa194f5ec78 EFLAGS: 00000246 [ 846.800775] do_splice+0x642/0x12c0 [ 846.805084] ORIG_RAX: 0000000000000036 [ 846.810472] ? opipe_prep.part.0+0x2d0/0x2d0 [ 846.814097] RAX: ffffffffffffffda RBX: 00007fa194f5ec90 RCX: 00000000004597c9 [ 846.818103] ? __fget_light+0x1a9/0x230 [ 846.822529] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.829909] __x64_sys_splice+0x2c6/0x330 [ 846.834485] RBP: 000000000075bf20 R08: 0000000000000001 R09: 0000000000000000 [ 846.841777] do_syscall_64+0xfd/0x620 [ 846.845931] R10: 0000000020000200 R11: 0000000000000246 R12: 00007fa194f5f6d4 [ 846.853225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 846.857020] R13: 00000000004c775d R14: 00000000004dcf08 R15: 0000000000000004 [ 846.864302] RIP: 0033:0x4597c9 18:06:38 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) [ 846.879959] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 846.882276] kobject: 'loop0' (00000000d72a1d95): kobject_uevent_env [ 846.898888] RSP: 002b:00007f0c59527c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 846.898902] RAX: ffffffffffffffda RBX: 00007f0c59527c90 RCX: 00000000004597c9 [ 846.898908] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 846.898915] RBP: 000000000075bf20 R08: 0000000100000300 R09: 0000000000000000 [ 846.898922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c595286d4 [ 846.898929] R13: 00000000004c8d54 R14: 00000000004def30 R15: 0000000000000005 [ 846.898941] Modules linked in: [ 846.899032] ---[ end trace 7d59c38488d9855b ]--- [ 846.936049] kobject: 'loop0' (00000000d72a1d95): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 846.942418] RIP: 0010:gcmaes_crypt_by_sg.constprop.0+0xde2/0x1850 [ 846.942434] Code: 82 f3 f9 ff ff e8 6e ac 35 00 4c 89 f7 e8 c6 c7 eb 01 48 8d 78 08 49 89 c6 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e a5 09 00 00 41 8b 46 08 89 84 [ 846.942441] RSP: 0018:ffff88804053f230 EFLAGS: 00010202 [ 846.942451] RAX: dffffc0000000000 RBX: 0000000000000056 RCX: ffffc900108c4000 [ 846.942458] RDX: 0000000000000001 RSI: ffffffff8321329b RDI: 0000000000000008 [ 846.942465] RBP: ffff88804053f570 R08: ffff88808af3a6c0 R09: 000000000000000d [ 846.942471] R10: ffff8880a7a26040 R11: 0000000000000010 R12: 0000000000000000 [ 846.942478] R13: 0000000000000056 R14: 0000000000000000 R15: 0000000000000029 [ 846.942488] FS: 00007f0c59528700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 846.942496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 846.942511] CR2: 0000001b31c21000 CR3: 00000000a924f000 CR4: 00000000001406f0 [ 846.991342] kobject: 'loop0' (00000000d72a1d95): kobject_uevent_env [ 846.998002] Kernel panic - not syncing: Fatal exception [ 846.999371] Kernel Offset: disabled [ 847.116630] Rebooting in 86400 seconds..