000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x0, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:55 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 1000.384416][ T4599] EXT4-fs (loop2): #blocks per group too big: 83918848 18:40:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x40126}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x5, 0x94, 0x5, 0x81, 0x0, 0x1, 0x240, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x8820, 0x10001, 0x2, 0x0, 0xff, 0x7, 0x7ff, 0x0, 0x7fff}, 0xffffffffffffffff, 0xf, r3, 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) 18:40:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000060080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x0, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:55 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 1000.476560][ T37] audit: type=1804 audit(1636483255.277:2705): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir887134070/syzkaller.YR5OdT/2375/bus" dev="sda1" ino=1164 res=1 errno=0 [ 1000.519405][ T37] audit: type=1800 audit(1636483255.277:2706): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1164 res=0 errno=0 [ 1000.550118][ T4612] loop2: detected capacity change from 0 to 512 [ 1000.567045][ T4612] EXT4-fs (loop2): #blocks per group too big: 100696064 18:40:55 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 18:40:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0x0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1000.694865][ T4612] loop2: detected capacity change from 0 to 512 18:40:55 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0x0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000070080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1000.854263][ T4628] loop2: detected capacity change from 0 to 512 [ 1000.912584][ T4628] EXT4-fs (loop2): #blocks per group too big: 117473280 [ 1001.003719][ T4628] loop2: detected capacity change from 0 to 512 [ 1001.056191][ T4628] EXT4-fs (loop2): #blocks per group too big: 117473280 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x700}, 0x0) 18:40:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0x0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008020100080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1001.422671][ T4631] loop2: detected capacity change from 0 to 512 [ 1001.467328][ T4631] EXT4-fs (loop2): #blocks per group too big: 270565376 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x900}, 0x0) 18:40:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0xe000000) [ 1001.561195][ T4631] loop2: detected capacity change from 0 to 512 [ 1001.586167][ T4631] EXT4-fs (loop2): #blocks per group too big: 270565376 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x9aa}, 0x0) 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 18:40:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000200080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xc00}, 0x0) 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0xf000000}, 0x0) [ 1001.775558][ T4651] loop2: detected capacity change from 0 to 512 [ 1001.826785][ T4651] EXT4-fs (loop2): #blocks per group too big: 536903680 18:40:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008010200080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0xe, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 18:40:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1002.006598][ T4663] loop2: detected capacity change from 0 to 512 [ 1002.044324][ T4663] EXT4-fs (loop2): #blocks per group too big: 537952256 18:40:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x3, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 18:40:56 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 1002.121027][ T4663] loop2: detected capacity change from 0 to 512 18:40:56 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1002.159666][ T4663] EXT4-fs (loop2): #blocks per group too big: 537952256 18:40:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 18:40:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080003f0080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) 18:40:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 1002.300453][ T4681] loop2: detected capacity change from 0 to 512 [ 1002.325088][ T4681] EXT4-fs (loop2): #blocks per group too big: 1056997376 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 18:40:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 1002.482381][ T4681] loop2: detected capacity change from 0 to 512 18:40:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1002.500545][ T4681] EXT4-fs (loop2): #blocks per group too big: 1056997376 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 18:40:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000400080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 1) 18:40:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xaa09}, 0x0) [ 1002.685428][ T4703] loop2: detected capacity change from 0 to 512 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1002.727929][ T4701] FAULT_INJECTION: forcing a failure. [ 1002.727929][ T4701] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.744643][ T4701] CPU: 2 PID: 4701 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1002.754241][ T4701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1002.765134][ T4703] EXT4-fs (loop2): #blocks per group too big: 1073774592 [ 1002.765557][ T4701] Call Trace: [ 1002.779635][ T4701] [ 1002.783269][ T4701] dump_stack_lvl+0xcd/0x134 [ 1002.789124][ T4701] should_fail.cold+0x5/0xa [ 1002.794591][ T4701] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1002.802382][ T4701] should_failslab+0x5/0x10 [ 1002.808287][ T4701] __kmalloc+0x72/0x340 [ 1002.813681][ T4701] tomoyo_realpath_from_path+0xc3/0x620 [ 1002.820464][ T4701] ? tomoyo_profile+0x42/0x50 [ 1002.825949][ T4701] tomoyo_path_number_perm+0x1d5/0x590 18:40:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1002.832560][ T4701] ? tomoyo_path_number_perm+0x18d/0x590 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x30000}, 0x0) [ 1002.839974][ T4701] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1002.848098][ T4701] ? check_path.constprop.0+0x50/0x50 [ 1002.856128][ T4701] ? lock_downgrade+0x6e0/0x6e0 [ 1002.863301][ T4701] ? find_held_lock+0x2d/0x110 [ 1002.870507][ T4701] ? __fget_files+0x23d/0x3e0 [ 1002.877579][ T4701] security_file_ioctl+0x50/0xb0 [ 1002.884761][ T4701] __do_compat_sys_ioctl+0x4e/0x290 [ 1002.891966][ T4701] __do_fast_syscall_32+0x65/0xf0 [ 1002.899732][ T4701] do_fast_syscall_32+0x2f/0x70 [ 1002.906968][ T4701] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1002.916325][ T4701] RIP: 0023:0xf6e9d549 [ 1002.922453][ T4701] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1002.951492][ T4701] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1002.963544][ T4701] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005412 [ 1002.974476][ T4701] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 18:40:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000ff0080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1002.985696][ T4701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1002.998784][ T4701] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1003.010056][ T4701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.019792][ T4701] [ 1003.024339][ T4701] ERROR: Out of memory at tomoyo_realpath_from_path. 18:40:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 18:40:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 2) 18:40:57 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1003.102913][ T4715] loop2: detected capacity change from 0 to 512 [ 1003.134011][ T4715] EXT4-fs (loop2): #blocks per group too big: 4278222848 [ 1003.164678][ T4720] FAULT_INJECTION: forcing a failure. [ 1003.164678][ T4720] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.181878][ T4720] CPU: 1 PID: 4720 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1003.193622][ T4720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1003.206096][ T4720] Call Trace: [ 1003.211158][ T4720] [ 1003.215262][ T4720] dump_stack_lvl+0xcd/0x134 [ 1003.221367][ T4720] should_fail.cold+0x5/0xa [ 1003.226722][ T4720] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1003.233833][ T4720] should_failslab+0x5/0x10 [ 1003.239685][ T4720] __kmalloc+0x72/0x340 [ 1003.245491][ T4720] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1003.253602][ T4720] tomoyo_encode+0x28/0x50 [ 1003.259291][ T4720] tomoyo_realpath_from_path+0x186/0x620 [ 1003.266299][ T4720] ? tomoyo_profile+0x42/0x50 [ 1003.272190][ T4720] tomoyo_path_number_perm+0x1d5/0x590 [ 1003.278730][ T4720] ? tomoyo_path_number_perm+0x18d/0x590 [ 1003.286967][ T4720] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1003.294878][ T4720] ? check_path.constprop.0+0x50/0x50 [ 1003.302570][ T4720] ? lock_downgrade+0x6e0/0x6e0 [ 1003.309155][ T4720] ? find_held_lock+0x2d/0x110 [ 1003.315352][ T4720] ? __fget_files+0x23d/0x3e0 [ 1003.321422][ T4720] security_file_ioctl+0x50/0xb0 [ 1003.327985][ T4720] __do_compat_sys_ioctl+0x4e/0x290 [ 1003.335512][ T4720] __do_fast_syscall_32+0x65/0xf0 [ 1003.342889][ T4720] do_fast_syscall_32+0x2f/0x70 [ 1003.349751][ T4720] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.358933][ T4720] RIP: 0023:0xf6e9d549 [ 1003.367536][ T4720] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1003.393118][ T4720] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1003.404738][ T4720] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000005412 [ 1003.415040][ T4720] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1003.424532][ T4720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.435284][ T4720] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1003.446892][ T4720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.457814][ T4720] [ 1003.462188][ T4720] ERROR: Out of memory at tomoyo_realpath_from_path. 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1003.551928][ T4715] loop2: detected capacity change from 0 to 512 [ 1003.573288][ T4715] EXT4-fs (loop2): #blocks per group too big: 4278222848 18:40:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 3) 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 18:40:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000ff000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1003.703430][ T4738] FAULT_INJECTION: forcing a failure. [ 1003.703430][ T4738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.725753][ T4738] CPU: 1 PID: 4738 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1003.737505][ T4738] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1003.740600][ T4742] loop2: detected capacity change from 0 to 512 [ 1003.750095][ T4738] Call Trace: [ 1003.750114][ T4738] [ 1003.750126][ T4738] dump_stack_lvl+0xcd/0x134 [ 1003.750169][ T4738] should_fail.cold+0x5/0xa [ 1003.750199][ T4738] _copy_to_user+0x2c/0x150 [ 1003.750337][ T4738] simple_read_from_buffer+0xcc/0x160 [ 1003.750379][ T4738] proc_fail_nth_read+0x187/0x220 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 1003.803362][ T4738] ? proc_sessionid_read+0x220/0x220 [ 1003.811096][ T4738] ? security_file_permission+0xab/0xd0 [ 1003.818224][ T4738] ? proc_sessionid_read+0x220/0x220 [ 1003.823941][ T4738] vfs_read+0x1b5/0x600 [ 1003.829797][ T4738] ksys_read+0x12d/0x250 [ 1003.835867][ T4738] ? vfs_write+0xae0/0xae0 [ 1003.841905][ T4738] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1003.851255][ T4738] __do_fast_syscall_32+0x65/0xf0 [ 1003.858312][ T4738] do_fast_syscall_32+0x2f/0x70 [ 1003.864845][ T4738] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1003.872958][ T4738] RIP: 0023:0xf6e9d549 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x0, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) [ 1003.878261][ T4738] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1003.905850][ T4738] RSP: 002b:00000000f4497600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 1003.918008][ T4738] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f4497690 [ 1003.928320][ T4738] RDX: 000000000000000f RSI: 00000000f6fd3000 RDI: 0000000000000000 [ 1003.939068][ T4738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1003.949015][ T4738] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1003.959777][ T4738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1003.970665][ T4738] [ 1004.009320][ T4742] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1004.018737][ T4742] EXT4-fs (loop2): mount failed 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:40:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x0, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000020080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 18:40:58 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x0, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) [ 1004.226629][ T4765] loop2: detected capacity change from 0 to 512 [ 1004.254884][ T4765] EXT4-fs (loop2): #blocks per group too big: 33587200 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:40:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000030080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:40:59 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x0, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1004.435840][ T4778] loop2: detected capacity change from 0 to 512 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 1004.453963][ T4778] EXT4-fs (loop2): #blocks per group too big: 50364416 18:40:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4bfb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:40:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000040080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:59 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x0, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) [ 1004.640482][ T4795] loop2: detected capacity change from 0 to 512 18:40:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c00, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1004.676104][ T4795] EXT4-fs (loop2): #blocks per group too big: 67141632 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 18:40:59 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x0, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:40:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000050080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 18:40:59 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1004.848576][ T4799] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1004.867902][ T4806] loop2: detected capacity change from 0 to 512 [ 1004.873592][ T4799] CPU: 1 PID: 4799 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1004.892447][ T4799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1004.903965][ T4799] Call Trace: [ 1004.907384][ T4799] [ 1004.911736][ T4799] dump_stack_lvl+0xcd/0x134 [ 1004.917190][ T4799] warn_alloc.cold+0x87/0x17a [ 1004.923092][ T4799] ? zone_watermark_ok_safe+0x290/0x290 [ 1004.929359][ T4799] ? __kmalloc_node+0x62/0x390 [ 1004.935197][ T4799] ? io_schedule_timeout+0x180/0x180 [ 1004.941992][ T4799] ? __vmalloc_node_range+0x574/0xab0 [ 1004.949583][ T4799] __vmalloc_node_range+0x883/0xab0 [ 1004.956809][ T4799] ? vfree_atomic+0xe0/0xe0 [ 1004.963730][ T4799] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1004.972228][ T4799] ? __ldsem_down_read_nested+0x850/0x850 [ 1004.979663][ T4799] ? __wake_up_common+0x650/0x650 [ 1004.985985][ T4799] ? n_tty_open+0x16/0x170 [ 1004.992265][ T4799] vzalloc+0x67/0x80 [ 1004.997532][ T4799] ? n_tty_open+0x16/0x170 [ 1005.003785][ T4799] n_tty_open+0x16/0x170 [ 1005.009836][ T4799] ? n_tty_set_termios+0x1010/0x1010 [ 1005.018222][ T4799] tty_ldisc_open+0x9b/0x110 [ 1005.025082][ T4799] tty_ldisc_setup+0x43/0x100 [ 1005.031329][ T4799] tty_init_dev.part.0+0x1f4/0x610 [ 1005.038752][ T4799] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1005.046619][ T4799] tty_init_dev+0x5b/0x80 [ 1005.053131][ T4799] ptmx_open+0x112/0x360 [ 1005.059496][ T4799] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1005.067034][ T4799] chrdev_open+0x266/0x770 [ 1005.073344][ T4799] ? cdev_device_add+0x210/0x210 [ 1005.079889][ T4799] ? fsnotify_perm.part.0+0x22d/0x620 [ 1005.086975][ T4799] do_dentry_open+0x4c8/0x1250 [ 1005.093589][ T4799] ? cdev_device_add+0x210/0x210 [ 1005.099380][ T4799] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1005.108159][ T4799] ? may_open+0x1f6/0x420 [ 1005.114297][ T4799] path_openat+0x1cad/0x2750 [ 1005.120340][ T4799] ? path_lookupat+0x860/0x860 [ 1005.126829][ T4799] ? perf_trace_lock+0xeb/0x4d0 [ 1005.133744][ T4799] ? check_path.constprop.0+0x50/0x50 [ 1005.140741][ T4799] do_filp_open+0x1aa/0x400 [ 1005.146684][ T4799] ? may_open_dev+0xf0/0xf0 [ 1005.152388][ T4799] ? rwlock_bug.part.0+0x90/0x90 [ 1005.159572][ T4799] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1005.167677][ T4799] ? _find_next_bit+0x1e3/0x260 18:40:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) [ 1005.174655][ T4799] ? _raw_spin_unlock+0x24/0x40 [ 1005.181332][ T4799] ? alloc_fd+0x2f0/0x670 [ 1005.186402][ T4799] do_sys_openat2+0x16d/0x4d0 [ 1005.191986][ T4799] ? build_open_flags+0x6f0/0x6f0 [ 1005.198682][ T4799] ? find_held_lock+0x2d/0x110 [ 1005.204801][ T4799] ? __context_tracking_exit+0xb8/0xe0 [ 1005.211986][ T4799] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1005.219565][ T4799] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1005.227102][ T4799] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1005.235642][ T4799] __do_fast_syscall_32+0x65/0xf0 [ 1005.242518][ T4799] do_fast_syscall_32+0x2f/0x70 [ 1005.248855][ T4799] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1005.257934][ T4799] RIP: 0023:0xf6e9d549 [ 1005.263581][ T4799] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1005.290349][ T4799] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1005.302177][ T4799] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1005.313119][ T4799] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1005.323610][ T4799] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1005.335005][ T4799] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1005.345855][ T4799] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1005.355208][ T4799] [ 1005.360754][ T4799] Mem-Info: [ 1005.365281][ T4799] active_anon:2263 inactive_anon:102777 isolated_anon:0 [ 1005.365281][ T4799] active_file:6667 inactive_file:48781 isolated_file:0 [ 1005.365281][ T4799] unevictable:768 dirty:101 writeback:0 [ 1005.365281][ T4799] slab_reclaimable:14924 slab_unreclaimable:47500 [ 1005.365281][ T4799] mapped:39165 shmem:1771 pagetables:1309 bounce:0 [ 1005.365281][ T4799] kernel_misc_reclaimable:0 [ 1005.365281][ T4799] free:22226 free_pcp:10615 free_cma:0 [ 1005.367056][ T4806] EXT4-fs (loop2): #blocks per group too big: 83918848 [ 1005.418234][ T4799] Node 0 active_anon:8700kB inactive_anon:140964kB active_file:3996kB inactive_file:17012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7856kB dirty:16kB writeback:0kB shmem:4264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8816kB pagetables:1684kB all_unreclaimable? no [ 1005.418313][ T4799] Node 1 active_anon:352kB inactive_anon:270144kB active_file:22672kB inactive_file:178112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148804kB dirty:388kB writeback:0kB shmem:2820kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2548kB pagetables:3552kB all_unreclaimable? no 18:41:00 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) [ 1005.418384][ T4799] Node 0 DMA free:3404kB boost:2048kB min:2768kB low:2948kB high:3128kB reserved_highatomic:0KB active_anon:44kB inactive_anon:7388kB active_file:176kB inactive_file:412kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:544kB local_pcp:156kB free_cma:0kB [ 1005.418474][ T4799] lowmem_reserve[]: 0 455 455 455 455 [ 1005.546338][ T4799] Node 0 DMA32 free:27292kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:8656kB inactive_anon:133576kB active_file:3820kB inactive_file:16600kB unevictable:1536kB writepending:16kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:14244kB local_pcp:4056kB free_cma:0kB [ 1005.585659][ T4799] lowmem_reserve[]: 0 0 0 0 0 [ 1005.592541][ T4799] Node 1 DMA32 free:58208kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:352kB inactive_anon:270244kB active_file:22672kB inactive_file:178112kB unevictable:1536kB writepending:388kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:27748kB local_pcp:5240kB free_cma:0kB [ 1005.592613][ T4799] lowmem_reserve[]: 0 0 0 0 0 [ 1005.592656][ T4799] Node 0 DMA: 69*4kB (UME) 33*8kB (UME) 13*16kB (UME) 13*32kB (UME) 5*64kB (E) 3*128kB (UE) 2*256kB (UE) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3404kB [ 1005.662058][ T4799] Node 0 DMA32: 47*4kB (UE) 350*8kB (UME) 117*16kB (UE) 231*32kB (UME) 79*64kB (UME) 26*128kB (UE) 6*256kB (UE) 4*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 27292kB [ 1005.683968][ T4799] Node 1 DMA32: 2*4kB (UE) 535*8kB (M) 230*16kB (M) 92*32kB (ME) 63*64kB (UME) 36*128kB (UME) 21*256kB (M) 15*512kB (UM) 7*1024kB (ME) 5*2048kB (M) 2*4096kB (M) = 58208kB [ 1005.706754][ T4799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.719742][ T4799] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.731881][ T4799] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1005.749787][ T4799] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1005.764035][ T4799] 12457 total pagecache pages [ 1005.772263][ T4799] 0 pages in swap cache [ 1005.777612][ T4799] Swap cache stats: add 0, delete 0, find 0/0 [ 1005.785587][ T4799] Free swap = 0kB [ 1005.790886][ T4799] Total swap = 0kB [ 1005.798737][ T4799] 524155 pages RAM [ 1005.807536][ T4799] 0 pages HighMem/MovableOnly [ 1005.813450][ T4799] 163149 pages reserved [ 1005.818618][ T4799] 0 pages cma reserved [ 1005.825867][ T4799] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1005.841076][ T4811] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:41:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:00 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) 18:41:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000060080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1005.978810][ T4829] loop2: detected capacity change from 0 to 512 18:41:00 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) [ 1006.040643][ T4829] EXT4-fs (loop2): #blocks per group too big: 100696064 18:41:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5401, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:00 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x888effff}, 0x0) 18:41:00 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000070080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1006.188942][ T4843] loop2: detected capacity change from 0 to 512 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) [ 1006.211958][ T4843] EXT4-fs (loop2): #blocks per group too big: 117473280 18:41:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:01 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 18:41:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000080080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xaa090000}, 0x0) [ 1006.360391][ T4853] loop2: detected capacity change from 0 to 512 [ 1006.391404][ T4853] EXT4-fs (loop2): #blocks per group too big: 134250496 18:41:01 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 18:41:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1006.538384][ T4853] loop2: detected capacity change from 0 to 512 [ 1006.562053][ T4853] EXT4-fs (loop2): #blocks per group too big: 134250496 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 18:41:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000100080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:01 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) [ 1006.775941][ T4872] loop2: detected capacity change from 0 to 512 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xffff8e88}, 0x0) [ 1006.841823][ T4872] EXT4-fs (loop2): #blocks per group too big: 268468224 18:41:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1006.933680][ T4872] loop2: detected capacity change from 0 to 512 18:41:01 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 1007.013670][ T4872] EXT4-fs (loop2): #blocks per group too big: 268468224 18:41:01 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 18:41:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000380000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 18:41:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 18:41:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1007.255706][ T4895] loop2: detected capacity change from 0 to 512 [ 1007.304843][ T4895] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1007.314842][ T4895] EXT4-fs (loop2): mount failed 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 18:41:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 18:41:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000580000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1007.540315][ T4917] loop2: detected capacity change from 0 to 512 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 18:41:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1007.578052][ T4917] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1007.586923][ T4917] EXT4-fs (loop2): mount failed 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 18:41:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000680000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5413, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1007.753529][ T4932] loop2: detected capacity change from 0 to 512 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1007.830330][ T4932] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1007.839572][ T4932] EXT4-fs (loop2): mount failed 18:41:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1007.855618][ T4928] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x2) 18:41:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1007.973579][ T4932] loop2: detected capacity change from 0 to 512 18:41:02 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x3) [ 1008.153308][ T4932] EXT4-fs: failed to create workqueue [ 1008.160097][ T4932] EXT4-fs (loop2): mount failed 18:41:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000780000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x0, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5415, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x4) [ 1008.358055][ T4961] loop2: detected capacity change from 0 to 512 [ 1008.446283][ T4961] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x5) 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x0, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1008.454963][ T4961] EXT4-fs (loop2): mount failed 18:41:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x6) 18:41:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000201080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x0, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1008.642523][ T4972] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1008.667640][ T4981] loop2: detected capacity change from 0 to 512 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x7) [ 1008.689503][ T4981] EXT4-fs (loop2): #blocks per group too big: 536903680 18:41:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000002080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x8) 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x0, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1008.843049][ T4988] loop2: detected capacity change from 0 to 512 [ 1008.875048][ T4988] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1008.884805][ T4988] EXT4-fs (loop2): mount failed 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x9) 18:41:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:03 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000102080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x0, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xc) [ 1009.027262][ T5003] loop2: detected capacity change from 0 to 512 [ 1009.049912][ T5003] EXT4-fs (loop2): #blocks per group too big: 268468224 18:41:03 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x0, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:03 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xe) [ 1009.171565][ T5003] loop2: detected capacity change from 0 to 512 [ 1009.272917][ T5003] EXT4-fs (loop2): #blocks per group too big: 268468224 18:41:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x0, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:04 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000003f80000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:04 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf) 18:41:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x0, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:04 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x60) 18:41:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x0, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:04 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf0) [ 1009.609403][ T5034] loop2: detected capacity change from 0 to 512 [ 1009.660296][ T5034] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1009.669742][ T5034] EXT4-fs (loop2): mount failed [ 1009.775226][ T5034] loop2: detected capacity change from 0 to 512 [ 1009.827990][ T5034] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1009.846051][ T5034] EXT4-fs (loop2): mount failed 18:41:04 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000004080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x0, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:04 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000ff80000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:04 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x0, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1010.288567][ T5056] loop2: detected capacity change from 0 to 512 18:41:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5422, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1010.375891][ T5056] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1010.385447][ T5056] EXT4-fs (loop2): mount failed [ 1010.494410][ T5056] loop2: detected capacity change from 0 to 512 [ 1010.543659][ T5056] EXT4-fs: failed to create workqueue [ 1010.551638][ T5056] EXT4-fs (loop2): mount failed [ 1011.486322][ T11] device hsr_slave_0 left promiscuous mode [ 1011.496025][ T11] device hsr_slave_1 left promiscuous mode [ 1011.505901][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.517502][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1011.529986][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1011.540427][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1011.555055][ T11] device bridge_slave_1 left promiscuous mode [ 1011.569146][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.581648][ T11] device bridge_slave_0 left promiscuous mode [ 1011.590406][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.610963][ T11] device veth1_macvtap left promiscuous mode [ 1011.619437][ T11] device veth0_macvtap left promiscuous mode [ 1011.628151][ T11] device veth1_vlan left promiscuous mode [ 1011.635664][ T11] device veth0_vlan left promiscuous mode [ 1012.226324][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1012.300061][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1012.368120][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.399706][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.555071][ T11] bond0 (unregistering): Released all slaves [ 1013.668436][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 1013.835356][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.845188][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.860354][ T5064] device bridge_slave_0 entered promiscuous mode [ 1013.873502][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.901193][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.913191][ T5064] device bridge_slave_1 entered promiscuous mode [ 1014.046904][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.068952][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.160381][ T5064] team0: Port device team_slave_0 added [ 1014.172350][ T5064] team0: Port device team_slave_1 added [ 1014.243058][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.254194][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.288336][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.307311][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.316368][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.350270][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.448311][ T5064] device hsr_slave_0 entered promiscuous mode [ 1014.468244][ T5064] device hsr_slave_1 entered promiscuous mode [ 1014.486990][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.496738][ T5064] Cannot create hsr debugfs directory [ 1014.636131][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.646695][ T5064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.658207][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.670061][ T5064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.705798][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.719184][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.847554][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.876915][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1014.888200][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.904174][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.927486][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1014.950941][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.966973][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.976835][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.007299][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1015.019778][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1015.032644][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.043278][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.054853][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1015.073799][ T3717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1015.090230][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1015.118891][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1015.142852][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1015.154226][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1015.167004][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1015.192267][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1015.203780][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1015.215930][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1015.228417][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1015.245933][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.281659][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1015.293273][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1015.329889][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.552316][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1015.563678][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1015.582552][ T3719] Bluetooth: hci3: command 0x0409 tx timeout [ 1015.600500][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1015.612813][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1015.624987][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1015.635091][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1015.656613][ T5064] device veth0_vlan entered promiscuous mode [ 1015.675874][ T5064] device veth1_vlan entered promiscuous mode [ 1015.714373][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1015.733621][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1015.759761][ T5064] device veth0_macvtap entered promiscuous mode [ 1015.787107][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1015.799244][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1015.815555][ T5064] device veth1_macvtap entered promiscuous mode [ 1015.826961][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1015.838615][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1015.895331][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.910161][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.924506][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.939464][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.953287][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1015.968409][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.984319][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.995580][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1016.007071][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1016.027055][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1016.041999][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.055884][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1016.071008][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.085360][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1016.101302][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.116335][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.128590][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1016.140007][T12643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1016.332861][ T3750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.344998][ T3750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.358078][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1016.384407][ T3750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.410049][ T3750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.424049][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 18:41:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x300) 18:41:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x0, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000053000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1016.647334][ T5084] loop2: detected capacity change from 0 to 512 [ 1016.722064][ T5084] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1016.731981][ T5084] EXT4-fs (loop2): mount failed 18:41:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x500) 18:41:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000280000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x600) [ 1016.858754][ T5100] loop2: detected capacity change from 0 to 512 18:41:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1016.909717][ T5100] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1016.922121][ T5100] EXT4-fs (loop2): mount failed 18:41:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x700) [ 1017.022955][ T5100] loop2: detected capacity change from 0 to 512 [ 1017.056263][ T5109] warn_alloc: 3 callbacks suppressed 18:41:11 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1017.056283][ T5109] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1017.095357][ T5109] CPU: 0 PID: 5109 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1017.105979][ T5109] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 18:41:11 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x900) [ 1017.120173][ T5109] Call Trace: [ 1017.124547][ T5109] [ 1017.127659][ T5109] dump_stack_lvl+0xcd/0x134 [ 1017.132492][ T5109] warn_alloc.cold+0x87/0x17a [ 1017.137852][ T5109] ? zone_watermark_ok_safe+0x290/0x290 [ 1017.144273][ T5109] ? __kmalloc_node+0x62/0x390 [ 1017.149732][ T5109] ? io_schedule_timeout+0x180/0x180 [ 1017.155860][ T5109] ? __vmalloc_node_range+0x574/0xab0 [ 1017.162717][ T5109] __vmalloc_node_range+0x883/0xab0 [ 1017.169565][ T5109] ? vfree_atomic+0xe0/0xe0 [ 1017.175418][ T5109] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1017.182916][ T5109] ? __ldsem_down_read_nested+0x850/0x850 [ 1017.190262][ T5109] ? __wake_up_common+0x650/0x650 [ 1017.197188][ T5109] ? n_tty_open+0x16/0x170 [ 1017.203188][ T5109] vzalloc+0x67/0x80 [ 1017.208490][ T5109] ? n_tty_open+0x16/0x170 [ 1017.214194][ T5109] n_tty_open+0x16/0x170 [ 1017.219326][ T5109] ? n_tty_set_termios+0x1010/0x1010 [ 1017.226275][ T5109] tty_ldisc_open+0x9b/0x110 [ 1017.232964][ T5109] tty_ldisc_setup+0x43/0x100 [ 1017.239656][ T5109] tty_init_dev.part.0+0x1f4/0x610 [ 1017.246506][ T5109] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1017.253652][ T5109] tty_init_dev+0x5b/0x80 [ 1017.259350][ T5109] ptmx_open+0x112/0x360 [ 1017.265242][ T5109] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1017.272474][ T5109] chrdev_open+0x266/0x770 [ 1017.278818][ T5109] ? cdev_device_add+0x210/0x210 [ 1017.285853][ T5109] ? fsnotify_perm.part.0+0x22d/0x620 [ 1017.293481][ T5109] do_dentry_open+0x4c8/0x1250 [ 1017.300775][ T5109] ? cdev_device_add+0x210/0x210 [ 1017.308667][ T5109] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1017.317345][ T5109] ? may_open+0x1f6/0x420 [ 1017.323206][ T5109] path_openat+0x1cad/0x2750 [ 1017.330254][ T5109] ? path_lookupat+0x860/0x860 [ 1017.337155][ T5109] ? perf_trace_lock+0x2ef/0x4d0 [ 1017.343145][ T5109] ? check_path.constprop.0+0x50/0x50 [ 1017.350350][ T5109] do_filp_open+0x1aa/0x400 [ 1017.356753][ T5109] ? may_open_dev+0xf0/0xf0 [ 1017.362990][ T5109] ? rwlock_bug.part.0+0x90/0x90 [ 1017.370256][ T5109] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1017.378771][ T5109] ? _find_next_bit+0x1e3/0x260 [ 1017.385522][ T5109] ? _raw_spin_unlock+0x24/0x40 [ 1017.392710][ T5109] ? alloc_fd+0x2f0/0x670 [ 1017.399962][ T5109] do_sys_openat2+0x16d/0x4d0 [ 1017.408052][ T5109] ? build_open_flags+0x6f0/0x6f0 [ 1017.415978][ T5109] ? find_held_lock+0x2d/0x110 [ 1017.422101][ T5109] ? __context_tracking_exit+0xb8/0xe0 [ 1017.430376][ T5109] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1017.438762][ T5109] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1017.446873][ T5109] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1017.455668][ T5109] __do_fast_syscall_32+0x65/0xf0 [ 1017.462630][ T5109] do_fast_syscall_32+0x2f/0x70 [ 1017.469002][ T5109] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1017.476970][ T5109] RIP: 0023:0xf6e9d549 [ 1017.482412][ T5109] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1017.509640][ T5109] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1017.520593][ T5109] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1017.529932][ T5109] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.542900][ T5109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1017.553465][ T5109] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1017.564458][ T5109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1017.574714][ T5109] 18:41:12 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x9aa) [ 1017.580384][ T5109] Mem-Info: [ 1017.585673][ T5109] active_anon:2263 inactive_anon:102726 isolated_anon:0 [ 1017.585673][ T5109] active_file:6985 inactive_file:48094 isolated_file:0 [ 1017.585673][ T5109] unevictable:768 dirty:38 writeback:0 [ 1017.585673][ T5109] slab_reclaimable:14893 slab_unreclaimable:47605 [ 1017.585673][ T5109] mapped:39166 shmem:1767 pagetables:1335 bounce:0 [ 1017.585673][ T5109] kernel_misc_reclaimable:0 [ 1017.585673][ T5109] free:23930 free_pcp:9859 free_cma:0 [ 1017.638057][ T5109] Node 0 active_anon:8676kB inactive_anon:141072kB active_file:5216kB inactive_file:15564kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7852kB dirty:32kB writeback:0kB shmem:4272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8848kB pagetables:1684kB all_unreclaimable? no [ 1017.681920][ T5109] Node 1 active_anon:376kB inactive_anon:269904kB active_file:22728kB inactive_file:176816kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148812kB dirty:136kB writeback:0kB shmem:2836kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2500kB pagetables:3560kB all_unreclaimable? no [ 1017.687735][ T27] Bluetooth: hci3: command 0x041b tx timeout [ 1017.728076][ T5109] Node 0 DMA free:2704kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:48kB inactive_anon:7404kB active_file:176kB inactive_file:412kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:728kB local_pcp:216kB free_cma:0kB [ 1017.728161][ T5109] lowmem_reserve[]: 0 455 455 455 455 [ 1017.728269][ T5109] Node 0 DMA32 free:27292kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:8628kB inactive_anon:133668kB active_file:5040kB inactive_file:15152kB unevictable:1536kB writepending:32kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:14332kB local_pcp:4424kB free_cma:0kB [ 1017.728392][ T5109] lowmem_reserve[]: 0 0 0 0 0 [ 1017.728449][ T5109] Node 1 DMA32 free:65512kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:376kB inactive_anon:269904kB active_file:22728kB inactive_file:176816kB unevictable:1536kB writepending:136kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:24416kB local_pcp:5008kB free_cma:0kB [ 1017.728573][ T5109] lowmem_reserve[]: 0 0 0 0 0 [ 1017.728630][ T5109] Node 0 DMA: 40*4kB (UME) 12*8kB (UME) 11*16kB (UME) 7*32kB (UME) 6*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2704kB [ 1017.896404][ T5109] Node 0 DMA32: 3*4kB (ME) 260*8kB (UE) 133*16kB (UE) 247*32kB (UME) 85*64kB (UE) 28*128kB (UME) 6*256kB (UE) 3*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 27292kB [ 1017.918340][ T5109] Node 1 DMA32: 528*4kB (ME) 617*8kB (UME) 238*16kB (ME) 106*32kB (UME) 83*64kB (UME) 45*128kB (UME) 33*256kB (UM) 16*512kB (UM) 7*1024kB (ME) 6*2048kB (UM) 1*4096kB (M) = 65512kB [ 1017.942422][ T5109] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.955165][ T5109] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1017.967498][ T5109] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1017.979926][ T5109] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1017.992706][ T5109] 12405 total pagecache pages [ 1017.999080][ T5109] 0 pages in swap cache [ 1018.004799][ T5109] Swap cache stats: add 0, delete 0, find 0/0 [ 1018.012776][ T5109] Free swap = 0kB [ 1018.018032][ T5109] Total swap = 0kB [ 1018.023103][ T5109] 524155 pages RAM [ 1018.028273][ T5109] 0 pages HighMem/MovableOnly [ 1018.034858][ T5109] 163149 pages reserved [ 1018.040316][ T5109] 0 pages cma reserved [ 1018.046377][ T5109] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1018.068633][ T5116] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1018.119792][ T5100] EXT4-fs: failed to create workqueue [ 1018.126157][ T5100] EXT4-fs (loop2): mount failed 18:41:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000380000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:12 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xc00) 18:41:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:12 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1018.220452][ T5127] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1018.234905][ T5135] loop2: detected capacity change from 0 to 512 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xe00) 18:41:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1018.293613][ T5135] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1018.302571][ T5135] EXT4-fs (loop2): mount failed 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf00) [ 1018.433531][ T5135] loop2: detected capacity change from 0 to 512 [ 1018.448141][ T5135] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1018.458385][ T5135] EXT4-fs (loop2): mount failed 18:41:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000480000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5429, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x1f00) 18:41:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x3f00) 18:41:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x542e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1018.656931][ T5163] loop2: detected capacity change from 0 to 512 18:41:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0x5, 0xffffffa6}}) [ 1018.690821][ T5163] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1018.714051][ T5163] EXT4-fs (loop2): mount failed 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x6000) [ 1018.809748][ T5163] loop2: detected capacity change from 0 to 512 [ 1018.834783][ T5163] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1018.842401][ T5163] EXT4-fs (loop2): mount failed 18:41:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000580000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x542f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xaa09) 18:41:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0x5, 0xffffffa6}}) 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf000) [ 1019.007661][ T5183] loop2: detected capacity change from 0 to 512 [ 1019.013381][ T3924] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1019.063272][ T5180] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1019.066385][ T5183] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1019.081904][ T5183] EXT4-fs (loop2): mount failed 18:41:13 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x10, 0x5, 0xffffffa6}}) 18:41:13 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x30000) 18:41:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5432, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:14 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000680000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x34000) 18:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x0, 0x5, 0xffffffa6}}) [ 1019.316101][ T5201] loop2: detected capacity change from 0 to 512 18:41:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5435, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1019.336369][ T5201] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1019.344950][ T5201] EXT4-fs (loop2): mount failed 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x400300) [ 1019.453932][ T5201] loop2: detected capacity change from 0 to 512 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf0ffff) [ 1019.476042][ T5201] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1019.483216][ T5201] EXT4-fs (loop2): mount failed 18:41:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x0, 0x5, 0xffffffa6}}) 18:41:14 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000780000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1019.715156][ T5223] loop2: detected capacity change from 0 to 512 18:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x0, 0x5, 0xffffffa6}}) [ 1019.742974][ T4169] Bluetooth: hci3: command 0x040f tx timeout 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x1000000) [ 1019.790736][ T5223] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1019.800570][ T5223] EXT4-fs (loop2): mount failed 18:41:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x0, 0xffffffa6}}) 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x2000000) [ 1019.902989][ T5223] loop2: detected capacity change from 0 to 512 [ 1019.913342][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1019.922367][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1019.952107][ T5223] EXT4-fs: failed to create workqueue [ 1019.958594][ T5223] EXT4-fs (loop2): mount failed 18:41:14 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x0, 0xffffffa6}}) 18:41:14 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000880000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:14 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:14 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x3000000) 18:41:14 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000001080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x4000000) 18:41:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x0, 0xffffffa6}}) [ 1020.261062][ T5254] loop2: detected capacity change from 0 to 512 18:41:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1020.288171][ T5254] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1020.297094][ T5254] EXT4-fs (loop2): mount failed 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x5000000) [ 1020.414886][ T5254] loop2: detected capacity change from 0 to 512 [ 1020.443443][ T5260] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1020.459818][ T5254] EXT4-fs: failed to create workqueue [ 1020.483829][ T5254] EXT4-fs (loop2): mount failed 18:41:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5453, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000ff000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x6000000) 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x7000000) 18:41:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5}}) [ 1020.700079][ T5279] loop2: detected capacity change from 0 to 512 [ 1020.756559][ T5279] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1020.764617][ T5279] EXT4-fs (loop2): mount failed 18:41:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x8000000) 18:41:15 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000053000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5}}) 18:41:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1020.997589][ T5297] loop2: detected capacity change from 0 to 512 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x9000000) 18:41:15 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5}}) 18:41:15 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5459, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1021.110478][ T5297] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1021.119976][ T5297] EXT4-fs (loop2): mount failed 18:41:15 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xc000000) 18:41:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1021.230053][ T5297] loop2: detected capacity change from 0 to 512 [ 1021.257262][ T5297] EXT4-fs: failed to create workqueue [ 1021.269382][ T5297] EXT4-fs (loop2): mount failed 18:41:16 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080020020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xe000000) 18:41:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf000000) [ 1021.563950][ T5325] loop2: detected capacity change from 0 to 512 18:41:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1021.605324][ T5325] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1021.613488][ T5325] EXT4-fs (loop2): mount failed 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x1f000000) 18:41:16 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080030020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x1000000) 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x3f000000) [ 1021.812054][ T5337] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x60000000) [ 1021.822543][ T4169] Bluetooth: hci3: command 0x0419 tx timeout [ 1021.840146][ T5348] loop2: detected capacity change from 0 to 512 18:41:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6364, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:16 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x0, 0x5, 0xffffffa6}}) 18:41:16 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x888effff) [ 1021.913566][ T5348] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1021.922721][ T5348] EXT4-fs (loop2): mount failed [ 1021.994212][ T5354] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:41:16 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6609, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1022.069273][ T5348] loop2: detected capacity change from 0 to 512 [ 1022.138014][ T5348] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1022.148742][ T5348] EXT4-fs (loop2): mount failed 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x9effffff) 18:41:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5429, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8913, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080040020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1022.352770][ T5372] loop2: detected capacity change from 0 to 512 [ 1022.448032][ T5372] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1022.455936][ T5372] EXT4-fs (loop2): mount failed 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xaa090000) 18:41:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080050020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8914, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1022.622119][ T5384] loop2: detected capacity change from 0 to 512 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xf0ffffff) 18:41:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x0, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1022.646174][ T5384] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1022.655215][ T5384] EXT4-fs (loop2): mount failed 18:41:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xfcffffff) 18:41:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080060020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1022.753226][ T5395] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xffff8e88) [ 1022.792765][ T5402] loop2: detected capacity change from 0 to 512 18:41:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x89a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1022.840850][ T5402] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1022.849064][ T5402] EXT4-fs (loop2): mount failed 18:41:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1023.007020][ T5402] loop2: detected capacity change from 0 to 512 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xfffff000) [ 1023.081841][ T5402] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:17 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x1f000000}, 0x0) [ 1023.090617][ T5402] EXT4-fs (loop2): mount failed 18:41:17 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x89a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:17 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xffffff7f) 18:41:17 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080070020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xffffff9e) [ 1023.321122][ T5431] loop2: detected capacity change from 0 to 512 18:41:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xae01, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1023.360239][ T5431] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1023.370053][ T5431] EXT4-fs (loop2): mount failed 18:41:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x89a1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xfffffff0) 18:41:18 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080080020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xfffffffc) 18:41:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40042406, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1023.574302][ T5446] loop2: detected capacity change from 0 to 512 [ 1023.629569][ T5446] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1023.638583][ T5446] EXT4-fs (loop2): mount failed 18:41:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0xffffffff) 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x204440) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4444820}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r2, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x76}}}}, [@NL80211_ATTR_FRAME_MATCH={0xb5, 0x5b, "56bf04d12445bd3c225b761de1a8526aee56d74e51c60ed1f9c3d7af7cbbf1ef8b50e0456ba2f21148b636e27566f2b884b1f8490c1c2cd2307d40e65870702381744ddccab29c195d3110ebed03523039e344fb955f59f7317662c17c21e95ea2e44d1d5d8a20f36c0ca4f0e61dec95d81d3db15ce4590eebb3af7a3d01720e24cf6a170743a22dcb0de84e49b819b4510e35188aa1c80f6f48021a21d0b475060f399f96ff2cb69272f45327889234b7"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1ff}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8001}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50}, 0x200080d0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400448c9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:18 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080100020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1023.962369][ T5465] loop2: detected capacity change from 0 to 512 18:41:18 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1024.016451][ T5465] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1024.026299][ T5465] EXT4-fs (loop2): mount failed 18:41:18 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400448dd, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:18 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)=ANY=[@ANYBLOB="c0b303e20eb103ba424c4fb9ff4663353ee88b7b60b55574bec4fdb444807861823625fdce6fb9f6ccb5dade1a05485540786c05c6254132a87c381db06108da84ff127a43fb0719775b88ab3c8bda022800848dfc897864df81625de908118b60651bc7a538c03dc548fbdaefe15d073e0631b74ad0ac26fe4f54781a8388b0494cd7e08e980713f6066560384535fca8f5cc98d1e2f3260124faa47dfe61e51d9c", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x2) poll(&(0x7f0000000300), 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000340)=0x3, 0x5) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x320}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x3, 0x8, 0xff80, 0x3f]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8014) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_mount_image$ntfs(&(0x7f0000000380), &(0x7f0000000440)='./file0\x00', 0x800, 0x0, &(0x7f00000004c0), 0x204000, &(0x7f0000000500)={[{@fmask={'fmask', 0x3d, 0xffff}}, {@dmask={'dmask', 0x3d, 0x8}}, {@disable_sparse_yes}, {@errors_recover}, {@errors_recover}, {@case_sensitive_yes}, {@disable_sparse_yes}], [{@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@dont_hash}]}) openat(r8, &(0x7f00000005c0)='./file1\x00', 0x2, 0x16) r9 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x80, 0x4, 0x0, 0x0, 0x2, 0xa2c01, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x455, 0x2, @perf_config_ext={0xffffffffffffffe0, 0xffffffffffffffef}, 0x40200, 0x200, 0x5, 0x1, 0x4, 0x5f, 0x1, 0x0, 0x1, 0x0, 0xffff}, r9, 0x5, 0xffffffffffffffff, 0xa) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000600)) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'errors=recover'}], 0xa, "f12e49390f47408b7161f0b42653759fd93361193aaf7b49d31f5639bd6e9f1289b141a0e97509cedca0fe917d65254680d965c4d24d501f16d911feb7f191a554cca8c3271af6359a93d0cdf7e439568d936207c8d54f1fced6e56906793eb02ef82f33771cdeb2facbead170df2b1ea93214229329c148ab6158597637f5499229ceaddf78de41a7b5bd5acadc43c5651b82fde4614c706e754d4c3587e0b6772d2551510a71a2060dacfeeb369b547984cf37b7ff99b487514652d6f494dfb51f8d27f33ef2dc8d51a898a6ee9e21a2ade6802635dca5ebaf546c6bebd3310a194e70bad32d3b88fda9d63668c0d89aaa6abfb5"}, 0x10f) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf254c00000008000300", @ANYRES32=r7, @ANYBLOB="0c00580017000000000000000c0058002a000000000000000c0058007100000020000000e4fe58001c000080000000000c0058004500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000900)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e6886408021100000137254b172d141f10b961b999c4be9757ec872e7d8811395a255e513a73cfb4f2959b6ecd451d028a733e6ffc08edfe0278da16c9dc66bf7f57089e32b8b2acac89af3edbb5642a616f3f26f0e0c802d8d7a5484a31a07d0000a3427ac514cf4e64cb6d577bdf718f24109316c51dbb62122b162c183e7be123c50c3c069ac54823129c2b849cf08f8029654b3a1c58684e460566614d4ab12f6fe037fb06c87df10a6f94"], 0x58}}, 0x0) 18:41:18 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1024.209026][ T5465] loop2: detected capacity change from 0 to 512 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400454ca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1024.228339][ T5480] loop3: detected capacity change from 0 to 4 [ 1024.248011][ T5480] ntfs: (device loop3): parse_options(): Unrecognized mount option smackfsroot. [ 1024.251594][ T5465] EXT4-fs: failed to create workqueue [ 1024.274234][ T5465] EXT4-fs (loop2): mount failed [ 1024.315965][ T5484] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40046602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1024.367942][ T5489] loop3: detected capacity change from 0 to 4 18:41:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000320000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1024.422976][ T5489] ntfs: (device loop3): parse_options(): Unrecognized mount option smackfsroot. 18:41:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) [ 1024.477921][ T5491] loop2: detected capacity change from 0 to 512 18:41:19 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x1, 0x2, 0x3}}, 0x2e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x4, @private0, 0x1}, @in6={0xa, 0x4e20, 0x6, @remote, 0x20}, @in6={0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8}, @in={0x2, 0x4e22, @private=0xa010102}, @in={0x2, 0x4e24, @remote}], 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="74000000e9ff0000001b000000006e1ef500bcd60b0eafe4b361af5c88ffa3efd9df4d43c89d339a979bb715f0cd587d23e48ddf7f", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1024.550277][ T5491] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1024.560764][ T5491] EXT4-fs (loop2): mount failed 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000520000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl0\x00', r6, 0x7d, 0x6, 0x1, 0x1000, 0x52, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x91, 0x10, 0x5, 0xffffffa6}}) 18:41:19 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000075b6d604cb0a8de1b2e69b9055e6de32306e0cade7cb7c5cf409f4422b57f1e21bc16f596782b7c1d1fc8cff0b16", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e688640802110000013285cc8abaa19cc3efb87666c423f4d94de3c2dd72d847889e621e60542baf6174b2ebce5fb35afa1e205da3b196f5e13cf0ccd395880777ec1c55becbd1e76c4935d75e48448de2310eecf1c72dc804ee4b424d4fde48d4264143ac9a549ce977b2cd0cba8e3a45f0855a9317852a6d0637ad"], 0x58}}, 0x0) [ 1024.718774][ T5503] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1024.723828][ T5506] loop2: detected capacity change from 0 to 512 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40086602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1024.767111][ T5506] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1024.775863][ T5506] EXT4-fs (loop2): mount failed [ 1024.851428][ T5506] loop2: detected capacity change from 0 to 512 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40089416, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1024.898871][ T5506] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1024.910349][ T5506] EXT4-fs (loop2): mount failed 18:41:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1024.969396][ T5521] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:19 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000620000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:19 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) write$binfmt_misc(r5, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRESOCT], 0x8f) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:19 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40186366, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$TCSETSF(r5, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x401c5820, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1025.236001][ T5532] loop2: detected capacity change from 0 to 512 [ 1025.295053][ T5532] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1025.303420][ T5532] EXT4-fs (loop2): mount failed 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000720000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7f, 0x10001, 0xf8, @dev={0xfe, 0x80, '\x00', 0x18}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x700, 0x40, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1025.482457][ T5545] loop2: detected capacity change from 0 to 512 [ 1025.499797][ T5541] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1025.524497][ T5545] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1025.532283][ T5545] EXT4-fs (loop2): mount failed 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c542b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) r5 = syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1025.639192][ T5550] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c542d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1025.704532][ T5545] loop2: detected capacity change from 0 to 512 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) syz_open_pts(r4, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1025.754951][ T5545] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1025.763333][ T5545] EXT4-fs (loop2): mount failed [ 1025.803854][ T5557] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) syz_open_pts(r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080201020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1025.997259][ T5568] loop2: detected capacity change from 0 to 512 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c5829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1026.077520][ T5568] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1026.086524][ T5568] EXT4-fs (loop2): mount failed 18:41:20 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xffffffca) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:20 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080002020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:20 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c582a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1026.260066][ T5580] loop2: detected capacity change from 0 to 512 [ 1026.313147][ T5580] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1026.322784][ T5580] EXT4-fs (loop2): mount failed 18:41:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c582b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:21 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080102020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1026.478162][ T5589] loop2: detected capacity change from 0 to 512 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1026.520337][ T5589] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1026.530650][ T5589] EXT4-fs (loop2): mount failed 18:41:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c5839, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000001200)=0x8000, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1026.684920][ T5589] loop2: detected capacity change from 0 to 512 [ 1026.737649][ T5589] EXT4-fs: failed to create workqueue [ 1026.745638][ T5589] EXT4-fs (loop2): mount failed 18:41:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:21 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080003f20000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r1, 0x331, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r3, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1026.989441][ T5610] loop2: detected capacity change from 0 to 512 18:41:21 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80045440, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1027.032759][ T5610] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1027.043639][ T5610] EXT4-fs (loop2): mount failed 18:41:21 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:21 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080004020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1027.312315][ T5617] loop2: detected capacity change from 0 to 512 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1027.377617][ T5617] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1027.387362][ T5617] EXT4-fs (loop2): mount failed 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:22 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80046601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:22 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000ff20000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1027.519868][ T5626] warn_alloc: 13 callbacks suppressed [ 1027.519904][ T5626] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1027.549208][ T5626] CPU: 1 PID: 5626 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1027.561472][ T5626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1027.574127][ T5626] Call Trace: 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1027.577887][ T5626] [ 1027.585607][ T5626] dump_stack_lvl+0xcd/0x134 [ 1027.590672][ T5626] warn_alloc.cold+0x87/0x17a [ 1027.596433][ T5626] ? zone_watermark_ok_safe+0x290/0x290 [ 1027.603633][ T5626] ? __kmalloc_node+0x62/0x390 [ 1027.604061][ T5632] loop2: detected capacity change from 0 to 512 [ 1027.610302][ T5626] ? io_schedule_timeout+0x180/0x180 [ 1027.627508][ T5626] ? __vmalloc_node_range+0x574/0xab0 [ 1027.635741][ T5626] __vmalloc_node_range+0x883/0xab0 [ 1027.643039][ T5626] ? vfree_atomic+0xe0/0xe0 [ 1027.649614][ T5626] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1027.657606][ T5626] ? __ldsem_down_read_nested+0x850/0x850 [ 1027.664936][ T5626] ? __wake_up_common+0x650/0x650 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1027.671884][ T5626] ? n_tty_open+0x16/0x170 [ 1027.678031][ T5626] vzalloc+0x67/0x80 [ 1027.691952][ T5626] ? n_tty_open+0x16/0x170 [ 1027.698335][ T5626] n_tty_open+0x16/0x170 [ 1027.703834][ T5626] ? n_tty_set_termios+0x1010/0x1010 [ 1027.710860][ T5626] tty_ldisc_open+0x9b/0x110 [ 1027.717196][ T5626] tty_ldisc_setup+0x43/0x100 [ 1027.723705][ T5626] tty_init_dev.part.0+0x1f4/0x610 [ 1027.732109][ T5626] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1027.740142][ T5626] tty_init_dev+0x5b/0x80 [ 1027.746572][ T5626] ptmx_open+0x112/0x360 [ 1027.752863][ T5626] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1027.760164][ T5626] chrdev_open+0x266/0x770 [ 1027.765899][ T5626] ? cdev_device_add+0x210/0x210 [ 1027.773485][ T5626] ? fsnotify_perm.part.0+0x22d/0x620 [ 1027.781458][ T5626] do_dentry_open+0x4c8/0x1250 [ 1027.787702][ T5626] ? cdev_device_add+0x210/0x210 [ 1027.794865][ T5626] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1027.804372][ T5626] ? may_open+0x1f6/0x420 [ 1027.810923][ T5626] path_openat+0x1cad/0x2750 [ 1027.817947][ T5626] ? path_lookupat+0x860/0x860 [ 1027.824703][ T5626] ? perf_trace_lock+0xeb/0x4d0 [ 1027.831580][ T5626] ? check_path.constprop.0+0x50/0x50 [ 1027.838319][ T5626] do_filp_open+0x1aa/0x400 18:41:22 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1027.844220][ T5626] ? may_open_dev+0xf0/0xf0 [ 1027.862724][ T5626] ? rwlock_bug.part.0+0x90/0x90 [ 1027.869452][ T5626] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1027.877162][ T5626] ? _find_next_bit+0x1e3/0x260 [ 1027.884985][ T5626] ? _raw_spin_unlock+0x24/0x40 [ 1027.891541][ T5626] ? alloc_fd+0x2f0/0x670 [ 1027.897443][ T5626] do_sys_openat2+0x16d/0x4d0 [ 1027.906260][ T5626] ? build_open_flags+0x6f0/0x6f0 [ 1027.917812][ T5626] ? find_held_lock+0x2d/0x110 [ 1027.927968][ T5626] ? __context_tracking_exit+0xb8/0xe0 [ 1027.937875][ T5626] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1027.946945][ T5626] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1027.956745][ T5626] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1027.967458][ T5626] __do_fast_syscall_32+0x65/0xf0 [ 1027.973762][ T5626] do_fast_syscall_32+0x2f/0x70 [ 1027.979674][ T5626] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1027.988565][ T5626] RIP: 0023:0xf6e9d549 [ 1027.994067][ T5626] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1028.020197][ T5626] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1028.030585][ T5626] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1028.040639][ T5626] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1028.051562][ T5626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1028.061729][ T5626] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1028.075559][ T5626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1028.087874][ T5626] [ 1028.093057][ T5626] Mem-Info: [ 1028.097057][ T5626] active_anon:2268 inactive_anon:102803 isolated_anon:1 [ 1028.097057][ T5626] active_file:7097 inactive_file:46579 isolated_file:0 [ 1028.097057][ T5626] unevictable:768 dirty:31 writeback:0 [ 1028.097057][ T5626] slab_reclaimable:14876 slab_unreclaimable:47691 [ 1028.097057][ T5626] mapped:39180 shmem:1787 pagetables:1292 bounce:0 18:41:22 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1028.097057][ T5626] kernel_misc_reclaimable:0 [ 1028.097057][ T5626] free:29928 free_pcp:6028 free_cma:0 [ 1028.164076][ T5626] Node 0 active_anon:8672kB inactive_anon:142444kB active_file:5616kB inactive_file:14908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:7876kB dirty:4kB writeback:0kB shmem:4296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8892kB pagetables:1904kB all_unreclaimable? no [ 1028.180135][ T5632] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1028.208321][ T5626] Node 1 active_anon:400kB inactive_anon:268692kB active_file:22772kB inactive_file:171408kB unevictable:1536kB isolated(anon):4kB isolated(file):0kB mapped:148852kB dirty:120kB writeback:0kB shmem:2852kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2372kB pagetables:3188kB all_unreclaimable? no [ 1028.208390][ T5626] Node 0 DMA free:2828kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:48kB inactive_anon:7404kB active_file:188kB inactive_file:400kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:716kB local_pcp:132kB free_cma:0kB [ 1028.208459][ T5626] lowmem_reserve[]: 0 455 [ 1028.216864][ T5632] EXT4-fs (loop2): mount failed [ 1028.261389][ T5626] 455 455 455 [ 1028.261438][ T5626] Node 0 DMA32 free:30060kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:8640kB inactive_anon:135052kB active_file:5396kB inactive_file:14544kB unevictable:1536kB writepending:4kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:6788kB local_pcp:4520kB free_cma:0kB [ 1028.261515][ T5626] lowmem_reserve[]: 0 0 0 0 0 18:41:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000060000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1028.261571][ T5626] Node 1 DMA32 free:86480kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:400kB inactive_anon:268636kB active_file:22772kB inactive_file:171408kB unevictable:1536kB writepending:120kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:16680kB local_pcp:10612kB free_cma:0kB [ 1028.261645][ T5626] lowmem_reserve[]: 0 0 0 0 0 [ 1028.261813][ T5626] Node 0 DMA: 15*4kB (UME) 6*8kB (ME) 10*16kB (UME) 12*32kB (UME) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 2828kB [ 1028.262005][ T5626] Node 0 DMA32: 292*4kB (UME) 300*8kB (UME) 136*16kB (UME) 261*32kB (UME) 88*64kB (UE) 28*128kB (UME) 6*256kB (UE) 3*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 29456kB [ 1028.456528][ T5626] Node 1 DMA32: 2348*4kB (UME) 1226*8kB (UME) 449*16kB (UME) 262*32kB (UME) 116*64kB (UME) 46*128kB (UME) 22*256kB (UM) 16*512kB (M) 10*1024kB (UME) 5*2048kB (M) 1*4096kB (M) = 86480kB [ 1028.482145][ T5626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.496595][ T5626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1028.509347][ T5626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1028.521903][ T5626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1028.533501][ T5626] 12380 total pagecache pages [ 1028.539547][ T5626] 0 pages in swap cache [ 1028.545066][ T5626] Swap cache stats: add 0, delete 0, find 0/0 [ 1028.554119][ T5626] Free swap = 0kB [ 1028.558711][ T5626] Total swap = 0kB [ 1028.564338][ T5626] 524155 pages RAM [ 1028.569950][ T5626] 0 pages HighMem/MovableOnly [ 1028.577032][ T5626] 163149 pages reserved [ 1028.583306][ T5626] 0 pages cma reserved [ 1028.589270][ T5626] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:23 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80047437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:23 executing program 1: r0 = socket(0x0, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1028.727924][ T5652] loop2: detected capacity change from 0 to 512 18:41:23 executing program 1: r0 = socket(0x0, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1028.808665][ T5652] EXT4-fs (loop2): inodes count not valid: 32 vs 96 18:41:23 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80047456, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:23 executing program 1: r0 = socket(0x0, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:23 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8004745a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:23 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000220000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:23 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.119573][ T5667] loop2: detected capacity change from 0 to 512 [ 1029.166654][ T5667] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1029.175377][ T5667] EXT4-fs (loop2): mount failed 18:41:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086301, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:24 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000320000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:24 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.306357][ T5677] loop2: detected capacity change from 0 to 512 18:41:24 executing program 1: r0 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.363594][ T5677] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1029.372326][ T5677] EXT4-fs (loop2): mount failed 18:41:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086601, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:24 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000420000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:24 executing program 1: socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.525895][ T5689] loop2: detected capacity change from 0 to 512 18:41:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:24 executing program 1: socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.615952][ T5689] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1029.624412][ T5689] EXT4-fs (loop2): mount failed 18:41:24 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000520000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:24 executing program 1: socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1029.772216][ T5700] loop2: detected capacity change from 0 to 512 18:41:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x802c542a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1029.799563][ T5700] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1029.809474][ T5700] EXT4-fs (loop2): mount failed 18:41:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 18:41:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 18:41:24 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000620000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:24 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x81f8943c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1029.942255][ T5712] loop2: detected capacity change from 0 to 512 18:41:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) [ 1029.964435][ T5712] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1029.974622][ T5712] EXT4-fs (loop2): mount failed 18:41:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) [ 1030.069203][ T5712] loop2: detected capacity change from 0 to 512 [ 1030.097045][ T5712] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1030.104820][ T5712] EXT4-fs (loop2): mount failed 18:41:24 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) 18:41:24 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000720000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1030.205039][ T5725] loop2: detected capacity change from 0 to 512 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) [ 1030.225381][ T5725] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1030.234357][ T5725] EXT4-fs (loop2): mount failed 18:41:25 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000820000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1030.392642][ T5733] loop2: detected capacity change from 0 to 512 18:41:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1030.460120][ T5733] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1030.469139][ T5733] EXT4-fs (loop2): mount failed 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0xe0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:25 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080001020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xda76, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0145608, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1030.658741][ T5746] loop2: detected capacity change from 0 to 512 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) [ 1030.726356][ T5746] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1030.738971][ T5746] EXT4-fs (loop2): mount failed 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2, 0x40, 0x700, 0x7, 0xfffffffa}}) 18:41:25 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000025000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1030.873544][ T5756] loop2: detected capacity change from 0 to 512 18:41:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189377, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2, 0x0, 0x700, 0x7, 0xfffffffa}}) [ 1030.934156][ T5756] EXT4-fs (loop2): inodes count not valid: 32 vs 37 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2, 0x0, 0x0, 0x7, 0xfffffffa}}) 18:41:25 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002f000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2, 0x0, 0x0, 0x0, 0xfffffffa}}) 18:41:25 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1031.073694][ T5766] loop2: detected capacity change from 0 to 512 [ 1031.114975][ T5766] EXT4-fs (loop2): inodes count not valid: 32 vs 47 18:41:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1031.238828][ T5766] loop2: detected capacity change from 0 to 512 [ 1031.267798][ T5766] EXT4-fs (loop2): inodes count not valid: 32 vs 47 18:41:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc018aa3f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80086301, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000037000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1031.509559][ T5780] loop2: detected capacity change from 0 to 512 18:41:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x80047437, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1031.589209][ T5780] EXT4-fs (loop2): inodes count not valid: 32 vs 55 18:41:26 executing program 3: ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000100)={&(0x7f0000000080)=[r0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x8}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000060000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc028660f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1031.748874][ T5790] loop2: detected capacity change from 0 to 512 [ 1031.766738][ T5790] EXT4-fs (loop2): inodes count not valid: 32 vs 96 18:41:26 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x402c542b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1031.834136][ T5793] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:26 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x2) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r3, 0x800) lseek(r3, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r3, r4, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000004c0)={0x80000001, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x0, 0x2, [{{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @broadcast}}]}, 0x18c) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x1001}, {r2, 0x8}, {r0, 0x1060}, {0xffffffffffffffff, 0x408}, {r0, 0x800}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x7fff, 0x7]}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3cfaff01"], 0x58}}, 0x0) [ 1031.862759][ T5790] loop2: detected capacity change from 0 to 512 18:41:26 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1031.895639][ T5790] EXT4-fs (loop2): inodes count not valid: 32 vs 96 [ 1031.934314][ T37] audit: type=1804 audit(1636483286.737:2707): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/52/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1031.976670][ T37] audit: type=1800 audit(1636483286.737:2708): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=0 errno=0 18:41:26 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000ff000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:26 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)=ANY=[@ANYBLOB="c0b303e20eb103ba424c4fb9ff4663353ee88b7b60b55574bec4fdb444807861823625fdce6fb9f6ccb5dade1a05485540786c05c6254132a87c381db06108da84ff127a43fb0719775b88ab3c8bda022800848dfc897864df81625de908118b60651bc7a538c03dc548fbdaefe15d073e0631b74ad0ac26fe4f54781a8388b0494cd7e08e980713f6066560384535fca8f5cc98d1e2f3260124faa47dfe61e51d9c", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x2) poll(&(0x7f0000000300), 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000340)=0x3, 0x5) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x320}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x3, 0x8, 0xff80, 0x3f]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8014) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r8 = syz_mount_image$ntfs(&(0x7f0000000380), &(0x7f0000000440)='./file0\x00', 0x800, 0x0, &(0x7f00000004c0), 0x204000, &(0x7f0000000500)={[{@fmask={'fmask', 0x3d, 0xffff}}, {@dmask={'dmask', 0x3d, 0x8}}, {@disable_sparse_yes}, {@errors_recover}, {@errors_recover}, {@case_sensitive_yes}, {@disable_sparse_yes}], [{@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@dont_hash}]}) openat(r8, &(0x7f00000005c0)='./file1\x00', 0x2, 0x16) r9 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x76, 0x80, 0x4, 0x0, 0x0, 0x2, 0xa2c01, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x455, 0x2, @perf_config_ext={0xffffffffffffffe0, 0xffffffffffffffef}, 0x40200, 0x200, 0x5, 0x1, 0x4, 0x5f, 0x1, 0x0, 0x1, 0x0, 0xffff}, r9, 0x5, 0xffffffffffffffff, 0xa) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000600)) write$binfmt_script(r5, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'errors=recover'}], 0xa, "f12e49390f47408b7161f0b42653759fd93361193aaf7b49d31f5639bd6e9f1289b141a0e97509cedca0fe917d65254680d965c4d24d501f16d911feb7f191a554cca8c3271af6359a93d0cdf7e439568d936207c8d54f1fced6e56906793eb02ef82f33771cdeb2facbead170df2b1ea93214229329c148ab6158597637f5499229ceaddf78de41a7b5bd5acadc43c5651b82fde4614c706e754d4c3587e0b6772d2551510a71a2060dacfeeb369b547984cf37b7ff99b487514652d6f494dfb51f8d27f33ef2dc8d51a898a6ee9e21a2ade6802635dca5ebaf546c6bebd3310a194e70bad32d3b88fda9d63668c0d89aaa6abfb5"}, 0x10f) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000ffdbdf254c00000008000300", @ANYRES32=r7, @ANYBLOB="0c00580017000000000000000c0058002a000000000000000c0058007100000020000000e4fe58001c000080000000000c0058004500000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004080}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000900)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e6886408021100000137254b172d141f10b961b999c4be9757ec872e7d8811395a255e513a73cfb4f2959b6ecd451d028a733e6ffc08edfe0278da16c9dc66bf7f57089e32b8b2acac89af3edbb5642a616f3f26f0e0c802d8d7a5484a31a07d0000a3427ac514cf4e64cb6d577bdf718f24109316c51dbb62122b162c183e7be123c50c3c069ac54823129c2b849cf08f8029654b3a1c58684e460566614d4ab12f6fe037fb06c87df10a6f94"], 0x58}}, 0x0) [ 1032.124737][ T5805] loop2: detected capacity change from 0 to 512 [ 1032.154967][ T5805] EXT4-fs (loop2): inodes count not valid: 32 vs 255 18:41:27 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc04c565d, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:27 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000025000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1032.318962][ T5817] loop2: detected capacity change from 0 to 512 [ 1032.344227][ T5817] EXT4-fs (loop2): inodes count not valid: 32 vs 37 18:41:27 executing program 1: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080100020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:27 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002f000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1032.515557][ T5822] loop2: detected capacity change from 0 to 512 [ 1032.536583][ T5822] EXT4-fs (loop2): inodes count not valid: 32 vs 47 [ 1032.795949][ T37] audit: type=1804 audit(1636483287.597:2709): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/52/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1032.838951][ T37] audit: type=1804 audit(1636483287.627:2710): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/52/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1032.880472][ T37] audit: type=1800 audit(1636483287.627:2711): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=0 errno=0 18:41:27 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001e1d759bc23c4ca681d99d03bb486ffb5c78205359cf0f3a9ee9eb443e0cb417b00a286b11ea9148179fab11a33c02747171a8002ce9cf151aa7b347e7aadef4ad544903fa3a3d2fca6ffcf22b99a1907d79cf63a865fd7098cc43a6497ad444c6d5babcd2654b7c4e9a61e5e5f0c2b4871ca73545c546eba58d05cd31cc278b4def3a8407861a652bb51f2e2692dc97020135fef3a32fa3b4a07618ba17b1599f99a6677667485e0b600"/206], 0x58}}, 0x0) 18:41:27 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0709411, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 1) 18:41:27 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000037000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1032.975671][ T5830] FAULT_INJECTION: forcing a failure. [ 1032.975671][ T5830] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.977643][ T5832] loop2: detected capacity change from 0 to 512 [ 1032.993634][ T5830] CPU: 0 PID: 5830 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1033.015485][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1033.028891][ T5830] Call Trace: [ 1033.033954][ T5830] [ 1033.037837][ T5830] dump_stack_lvl+0xcd/0x134 [ 1033.044364][ T5830] should_fail.cold+0x5/0xa [ 1033.050882][ T5830] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1033.060262][ T5830] should_failslab+0x5/0x10 [ 1033.066569][ T5830] __kmalloc+0x72/0x340 [ 1033.072595][ T5830] tomoyo_realpath_from_path+0xc3/0x620 [ 1033.080565][ T5830] ? tomoyo_profile+0x42/0x50 [ 1033.088217][ T5830] tomoyo_path_number_perm+0x1d5/0x590 [ 1033.095524][ T5830] ? tomoyo_path_number_perm+0x18d/0x590 [ 1033.102788][ T5830] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1033.110899][ T5830] ? check_path.constprop.0+0x50/0x50 [ 1033.118578][ T5830] ? lock_downgrade+0x6e0/0x6e0 [ 1033.124987][ T5830] ? find_held_lock+0x2d/0x110 [ 1033.131832][ T5830] ? __fget_files+0x23d/0x3e0 [ 1033.137883][ T5830] security_file_ioctl+0x50/0xb0 [ 1033.144213][ T5830] __do_compat_sys_ioctl+0x4e/0x290 [ 1033.151755][ T5830] __do_fast_syscall_32+0x65/0xf0 [ 1033.158878][ T5830] do_fast_syscall_32+0x2f/0x70 [ 1033.166069][ T5830] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.174033][ T5830] RIP: 0023:0xf6e9e549 [ 1033.179606][ T5830] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1033.204125][ T5830] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1033.216438][ T5830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1033.228143][ T5830] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.238815][ T5830] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.250882][ T5830] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.263015][ T5830] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.274432][ T5830] [ 1033.279683][ T5830] ERROR: Out of memory at tomoyo_realpath_from_path. 18:41:27 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x3, 0x1, 0xd3, 0x0, 0x7, 0x1400, 0xd, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x8, 0x10000, 0x3, 0x9, 0x400, 0x3ff, 0x7, 0x0, 0x400, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="040ef88ddd1ccaa6e4942f1b632b0a348aaa85c9ca509932579f97fb2e0eb2709551c22974e359a2bf6b28bbb94613427824d9a8d589254a372be762f7e9289b59edcca3e90161bf18d9889725d92a88a3954ebd96e8d82f4de3015119d23e0d2c6255d172a3992054b056043152341ca1ebc7195d84341f47e17507d5cb43cd122161599c88cb6c44acba3a96ee0e6730d89a9c7f84282daf651d106d056297872506c05d6a2b435ce6238c7d517c99d3c0f205747b8cd5ed272cadd519fa9ad804dcf241fa2181734c246399ddd10216777fb420b3962b7fd7e73aa9c9d3430cd85793c97f7bde3cc3c4c872e1b650d10bd388518adb28c3f0e9e6ef608cdac47ee55223337d38473d2029528745f5b85515a9eadbfa91fc4d368ef792ab592e767b8a1932025ab8a6c3a2656bcc88077a3b152f3f68a0304b23ce764cfaadb9b6ceb798e641e4b190f6110a9eb60ebab82ef6f8", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:28 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESDEC=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:28 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xc0f8565c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1033.310351][ T5832] EXT4-fs (loop2): inodes count not valid: 32 vs 55 18:41:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 2) [ 1033.357344][ T5848] FAULT_INJECTION: forcing a failure. [ 1033.357344][ T5848] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.367387][ T37] audit: type=1804 audit(1636483288.167:2712): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/56/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1033.380529][ T5848] CPU: 3 PID: 5848 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 18:41:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1033.422909][ T37] audit: type=1800 audit(1636483288.167:2713): pid=5849 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1033.441867][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1033.441889][ T5848] Call Trace: [ 1033.441900][ T5848] [ 1033.441910][ T5848] dump_stack_lvl+0xcd/0x134 [ 1033.441950][ T5848] should_fail.cold+0x5/0xa [ 1033.551937][ T5848] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1033.565793][ T5848] should_failslab+0x5/0x10 [ 1033.572579][ T5848] __kmalloc+0x72/0x340 [ 1033.579016][ T5848] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1033.589177][ T5848] tomoyo_encode+0x28/0x50 [ 1033.596175][ T5848] tomoyo_realpath_from_path+0x186/0x620 [ 1033.604049][ T5848] ? tomoyo_profile+0x42/0x50 [ 1033.641973][ T5848] tomoyo_path_number_perm+0x1d5/0x590 [ 1033.647704][ T5848] ? tomoyo_path_number_perm+0x18d/0x590 [ 1033.669025][ T5848] ? tomoyo_execute_permission+0x4a0/0x4a0 18:41:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1033.676661][ T5848] ? check_path.constprop.0+0x50/0x50 [ 1033.693225][ T5848] ? lock_downgrade+0x6e0/0x6e0 [ 1033.700062][ T5848] ? find_held_lock+0x2d/0x110 [ 1033.714154][ T5848] ? __fget_files+0x23d/0x3e0 [ 1033.719827][ T5848] security_file_ioctl+0x50/0xb0 [ 1033.726941][ T5848] __do_compat_sys_ioctl+0x4e/0x290 [ 1033.734586][ T5848] __do_fast_syscall_32+0x65/0xf0 [ 1033.742371][ T5848] do_fast_syscall_32+0x2f/0x70 [ 1033.750762][ T5848] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1033.762571][ T5848] RIP: 0023:0xf6e9e549 [ 1033.770179][ T5848] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1033.804942][ T5848] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1033.835648][ T5848] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1033.862311][ T5848] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1033.886106][ T5848] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1033.913918][ T5848] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1033.926677][ T5848] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1033.943333][ T5848] [ 1033.947452][ T5848] ERROR: Out of memory at tomoyo_realpath_from_path. 18:41:28 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020020000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:28 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 3) [ 1034.090867][ T5862] loop2: detected capacity change from 0 to 512 [ 1034.092242][ T5860] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1034.122392][ T5866] FAULT_INJECTION: forcing a failure. [ 1034.122392][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.136526][ T5862] EXT4-fs (loop2): inodes count not valid: 32 vs 544 [ 1034.155667][ T5866] CPU: 3 PID: 5866 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1034.186669][ T5866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1034.200832][ T5866] Call Trace: [ 1034.206190][ T5866] [ 1034.211441][ T5866] dump_stack_lvl+0xcd/0x134 [ 1034.220621][ T5866] should_fail.cold+0x5/0xa [ 1034.229652][ T5866] _copy_from_user+0x2c/0x180 [ 1034.238259][ T5866] get_user_ifreq+0x18c/0x250 [ 1034.245660][ T5866] sock_ioctl+0x50a/0x640 [ 1034.251559][ T5866] ? br_ioctl_call+0xa0/0xa0 [ 1034.257422][ T5866] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1034.264705][ T5866] compat_sock_ioctl+0x3a2/0x6d0 [ 1034.275329][ T5866] ? sock_ioctl+0x640/0x640 [ 1034.281819][ T5866] ? __fget_files+0x23d/0x3e0 [ 1034.282400][ T37] audit: type=1804 audit(1636483289.077:2714): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/56/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1034.288331][ T5866] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.327854][ T37] audit: type=1804 audit(1636483289.077:2715): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/56/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1034.337882][ T5866] ? sock_ioctl+0x640/0x640 [ 1034.337928][ T5866] __do_compat_sys_ioctl+0x1c7/0x290 [ 1034.337968][ T5866] __do_fast_syscall_32+0x65/0xf0 [ 1034.338000][ T5866] do_fast_syscall_32+0x2f/0x70 [ 1034.338029][ T5866] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.338060][ T5866] RIP: 0023:0xf6e9e549 [ 1034.338083][ T5866] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1034.338110][ T5866] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1034.338139][ T5866] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1034.338165][ T5866] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1034.338183][ T5866] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1034.338200][ T5866] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1034.338216][ T5866] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1034.338252][ T5866] [ 1034.527215][ T37] audit: type=1800 audit(1636483289.077:2716): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 18:41:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:29 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020030000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 4) 18:41:29 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000ff5ec3b1f3e53a0da829c9dd69b4221953675ed1353ead6982d765afa3cce5df2c2d7f470c7ad2afa671903dedb3dd5063e9aee6decab14e8fc29243b9b666324c4880f659d3605781108810e51e7bb7053f7af80eb9aa3eef6314ef174c851dfdd0df24cd05a4f7b14fc4b2e0ee32436e4483c86d303db675f2edeff79c00a8a922d58e87f4967f69567d5acd85", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r2, r3, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3d, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8, 0x0, 0x4}, r4, 0xa, 0xffffffffffffffff, 0x1) r5 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3d, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8, 0x0, 0x4}, r5, 0xa, 0xffffffffffffffff, 0x1) r6 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3d, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8, 0x0, 0x4}, r6, 0xa, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@RTM_GETNSID={0x5c, 0x5a, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r4}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40014}, 0x850) [ 1034.642741][ T5873] loop2: detected capacity change from 0 to 512 [ 1034.677046][ T5873] EXT4-fs (loop2): inodes count not valid: 32 vs 800 [ 1034.685840][ T5874] FAULT_INJECTION: forcing a failure. [ 1034.685840][ T5874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.707948][ T5874] CPU: 0 PID: 5874 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1034.726304][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1034.738855][ T5874] Call Trace: [ 1034.742807][ T5874] [ 1034.746319][ T5874] dump_stack_lvl+0xcd/0x134 [ 1034.753391][ T5874] should_fail.cold+0x5/0xa [ 1034.759941][ T5874] _copy_from_user+0x2c/0x180 [ 1034.766828][ T5874] ip6gre_tunnel_siocdevprivate+0x328/0x1570 [ 1034.776718][ T5874] ? ip6erspan_tunnel_xmit+0x3020/0x3020 [ 1034.787704][ T5874] ? lock_release+0x720/0x720 [ 1034.795209][ T5874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.805015][ T5874] ? full_name_hash+0xb5/0xf0 [ 1034.812429][ T5874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.820960][ T5874] ? netdev_name_node_lookup+0x108/0x150 [ 1034.829073][ T5874] dev_ifsioc+0xed5/0x10c0 [ 1034.835695][ T5874] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1034.843906][ T5874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.854340][ T5874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.863541][ T5874] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1034.871997][ T5874] dev_ioctl+0x28b/0xed0 [ 1034.877298][ T5874] sock_ioctl+0x537/0x640 [ 1034.883447][ T5874] ? br_ioctl_call+0xa0/0xa0 [ 1034.889256][ T5874] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1034.894879][ T5874] compat_sock_ioctl+0x3a2/0x6d0 [ 1034.900401][ T5874] ? sock_ioctl+0x640/0x640 [ 1034.905988][ T5874] ? __fget_files+0x23d/0x3e0 18:41:29 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1034.912400][ T5874] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1034.921206][ T5874] ? sock_ioctl+0x640/0x640 [ 1034.926717][ T5874] __do_compat_sys_ioctl+0x1c7/0x290 [ 1034.934212][ T5874] __do_fast_syscall_32+0x65/0xf0 [ 1034.941155][ T5874] do_fast_syscall_32+0x2f/0x70 [ 1034.947607][ T5874] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1034.956510][ T5874] RIP: 0023:0xf6e9e549 [ 1034.962096][ T5874] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1034.989440][ T5874] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1034.999385][ T5874] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1035.008346][ T5874] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.019143][ T5874] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.030491][ T5874] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1035.043215][ T5874] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.053091][ T5874] 18:41:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 5) [ 1035.165127][ T5883] FAULT_INJECTION: forcing a failure. [ 1035.165127][ T5883] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.183534][ T5883] CPU: 1 PID: 5883 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1035.196074][ T5883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1035.208037][ T5883] Call Trace: [ 1035.212831][ T5883] [ 1035.216655][ T5883] dump_stack_lvl+0xcd/0x134 18:41:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1035.224517][ T5873] loop2: detected capacity change from 0 to 512 [ 1035.237227][ T5883] should_fail.cold+0x5/0xa [ 1035.237279][ T5883] ? kvmalloc_node+0x61/0x120 [ 1035.237329][ T5883] should_failslab+0x5/0x10 [ 1035.237361][ T5883] __kmalloc_node+0x75/0x390 [ 1035.237402][ T5883] kvmalloc_node+0x61/0x120 [ 1035.237436][ T5883] alloc_netdev_mqs+0x98/0xec0 [ 1035.237474][ T5883] ? ip6gre_netlink_encap_parms+0x340/0x340 [ 1035.237517][ T5883] ip6gre_tunnel_siocdevprivate+0xc48/0x1570 [ 1035.237561][ T5883] ? ip6erspan_tunnel_xmit+0x3020/0x3020 [ 1035.237633][ T5883] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.237672][ T5883] ? full_name_hash+0xb5/0xf0 [ 1035.237702][ T5883] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.237737][ T5883] ? netdev_name_node_lookup+0x108/0x150 [ 1035.237774][ T5883] dev_ifsioc+0xed5/0x10c0 [ 1035.237807][ T5883] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1035.237840][ T5883] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 18:41:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1035.237882][ T5883] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.237917][ T5883] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1035.237964][ T5883] dev_ioctl+0x28b/0xed0 [ 1035.237998][ T5883] sock_ioctl+0x537/0x640 [ 1035.238030][ T5883] ? br_ioctl_call+0xa0/0xa0 [ 1035.238063][ T5883] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1035.238116][ T5883] compat_sock_ioctl+0x3a2/0x6d0 [ 1035.238149][ T5883] ? sock_ioctl+0x640/0x640 [ 1035.238187][ T5883] ? __fget_files+0x23d/0x3e0 [ 1035.238228][ T5883] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.238265][ T5883] ? sock_ioctl+0x640/0x640 [ 1035.238323][ T5883] __do_compat_sys_ioctl+0x1c7/0x290 [ 1035.238370][ T5883] __do_fast_syscall_32+0x65/0xf0 [ 1035.238406][ T5883] do_fast_syscall_32+0x2f/0x70 [ 1035.238437][ T5883] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1035.238472][ T5883] RIP: 0023:0xf6e9e549 [ 1035.238500][ T5883] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1035.238531][ T5883] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1035.238564][ T5883] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1035.238585][ T5883] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1035.238605][ T5883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1035.621900][ T5883] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1035.639308][ T5883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1035.655886][ T5883] [ 1035.664328][ T5873] EXT4-fs (loop2): inodes count not valid: 32 vs 800 18:41:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 6) [ 1035.726266][ T5890] FAULT_INJECTION: forcing a failure. [ 1035.726266][ T5890] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.742695][ T5890] CPU: 0 PID: 5890 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 18:41:30 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020040000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1035.753817][ T5890] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1035.768430][ T5890] Call Trace: [ 1035.772469][ T5890] [ 1035.778674][ T5890] dump_stack_lvl+0xcd/0x134 [ 1035.786935][ T5890] should_fail.cold+0x5/0xa [ 1035.794179][ T5890] ? __do_fast_syscall_32+0x65/0xf0 [ 1035.801471][ T5890] ? __hw_addr_add_ex+0x281/0x940 [ 1035.808891][ T5890] should_failslab+0x5/0x10 [ 1035.815557][ T5890] kmem_cache_alloc_trace+0x55/0x2c0 [ 1035.824201][ T5890] __hw_addr_add_ex+0x281/0x940 [ 1035.832093][ T5890] ? __hw_addr_lookup+0x2c0/0x2c0 [ 1035.840960][ T5890] ? memcg_slab_post_alloc_hook+0x22f/0x430 [ 1035.850386][ T5890] ? lock_downgrade+0x6e0/0x6e0 [ 1035.859668][ T5890] dev_addr_init+0x13a/0x220 [ 1035.866173][ T5890] ? dev_addr_flush+0x50/0x50 [ 1035.872631][ T5890] ? __kasan_kmalloc+0xa9/0xd0 [ 1035.880187][ T5890] alloc_netdev_mqs+0x13b/0xec0 [ 1035.887198][ T5890] ? ip6gre_netlink_encap_parms+0x340/0x340 [ 1035.897513][ T5890] ip6gre_tunnel_siocdevprivate+0xc48/0x1570 [ 1035.905443][ T5890] ? ip6erspan_tunnel_xmit+0x3020/0x3020 [ 1035.914270][ T5890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.923441][ T5890] ? full_name_hash+0xb5/0xf0 [ 1035.930074][ T5890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.938373][ T5890] ? netdev_name_node_lookup+0x108/0x150 [ 1035.945904][ T5890] dev_ifsioc+0xed5/0x10c0 [ 1035.952810][ T5890] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1035.960372][ T5890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.968034][ T5890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1035.976821][ T5890] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1035.984273][ T5890] dev_ioctl+0x28b/0xed0 [ 1035.989510][ T5890] sock_ioctl+0x537/0x640 [ 1035.995696][ T5890] ? br_ioctl_call+0xa0/0xa0 [ 1036.002594][ T5890] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1036.010920][ T5890] compat_sock_ioctl+0x3a2/0x6d0 [ 1036.018238][ T5890] ? sock_ioctl+0x640/0x640 [ 1036.024739][ T5890] ? __fget_files+0x23d/0x3e0 [ 1036.030822][ T5890] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.038735][ T5890] ? sock_ioctl+0x640/0x640 [ 1036.044796][ T5890] __do_compat_sys_ioctl+0x1c7/0x290 [ 1036.052077][ T5890] __do_fast_syscall_32+0x65/0xf0 [ 1036.058608][ T5890] do_fast_syscall_32+0x2f/0x70 [ 1036.065499][ T5890] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.074003][ T5890] RIP: 0023:0xf6e9e549 [ 1036.079001][ T5890] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1036.103374][ T5890] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1036.114494][ T5890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1036.125579][ T5890] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.137146][ T5890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.147899][ T5890] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1036.158948][ T5890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.171047][ T5890] 18:41:30 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 7) 18:41:31 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3d, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8, 0x0, 0x4}, r4, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1a, 0x1, 0x80, 0x0, 0xf0d0, 0x2c000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x10200, 0x400, 0x4, 0x8, 0x69a1, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1000}, r4, 0x9, r0, 0x3) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1036.274059][ T5895] loop2: detected capacity change from 0 to 512 [ 1036.293736][ T5895] EXT4-fs (loop2): inodes count not valid: 32 vs 1056 [ 1036.306133][ T5897] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1036.337230][ T5902] FAULT_INJECTION: forcing a failure. [ 1036.337230][ T5902] name failslab, interval 1, probability 0, space 0, times 0 18:41:31 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020050000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1036.357256][ T5902] CPU: 0 PID: 5902 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1036.371657][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1036.385241][ T5902] Call Trace: [ 1036.389651][ T5902] [ 1036.393913][ T5902] dump_stack_lvl+0xcd/0x134 [ 1036.399456][ T5902] should_fail.cold+0x5/0xa [ 1036.401453][ T5906] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1036.404888][ T5902] ? kvmalloc_node+0x61/0x120 [ 1036.404929][ T5902] should_failslab+0x5/0x10 [ 1036.404959][ T5902] __kmalloc_node+0x75/0x390 [ 1036.404993][ T5902] kvmalloc_node+0x61/0x120 [ 1036.439453][ T5902] alloc_netdev_mqs+0x774/0xec0 [ 1036.445039][ T5902] ip6gre_tunnel_siocdevprivate+0xc48/0x1570 [ 1036.453034][ T5902] ? ip6erspan_tunnel_xmit+0x3020/0x3020 [ 1036.459603][ T5902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.466799][ T5902] ? full_name_hash+0xb5/0xf0 [ 1036.473003][ T5902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.481443][ T5902] ? netdev_name_node_lookup+0x108/0x150 [ 1036.488821][ T5902] dev_ifsioc+0xed5/0x10c0 [ 1036.494549][ T5902] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1036.502302][ T5902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.502456][ T5905] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1036.511550][ T5902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.535654][ T5902] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1036.544691][ T5902] dev_ioctl+0x28b/0xed0 18:41:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x300, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1036.550172][ T5902] sock_ioctl+0x537/0x640 [ 1036.556757][ T5902] ? br_ioctl_call+0xa0/0xa0 [ 1036.562299][ T5902] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1036.568872][ T5902] compat_sock_ioctl+0x3a2/0x6d0 [ 1036.575183][ T5902] ? sock_ioctl+0x640/0x640 [ 1036.580185][ T5902] ? __fget_files+0x23d/0x3e0 [ 1036.585771][ T5902] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1036.593208][ T5902] ? sock_ioctl+0x640/0x640 [ 1036.598249][ T5902] __do_compat_sys_ioctl+0x1c7/0x290 [ 1036.605230][ T5902] __do_fast_syscall_32+0x65/0xf0 [ 1036.611659][ T5902] do_fast_syscall_32+0x2f/0x70 [ 1036.616336][ T5902] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1036.623560][ T5902] RIP: 0023:0xf6e9e549 [ 1036.629403][ T5902] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1036.655572][ T5902] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1036.666669][ T5902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1036.678388][ T5902] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1036.688654][ T5902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1036.698668][ T5902] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1036.709829][ T5902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1036.720290][ T5902] 18:41:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 8) 18:41:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x500, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:31 executing program 3: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80046601, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1036.838595][ T5915] loop2: detected capacity change from 0 to 512 [ 1036.857530][ T5917] FAULT_INJECTION: forcing a failure. [ 1036.857530][ T5917] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.886278][ T5917] CPU: 3 PID: 5917 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1036.892082][ T5915] EXT4-fs (loop2): inodes count not valid: 32 vs 1312 [ 1036.899814][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1036.899833][ T5917] Call Trace: [ 1036.899857][ T5917] [ 1036.899868][ T5917] dump_stack_lvl+0xcd/0x134 [ 1036.899923][ T5917] should_fail.cold+0x5/0xa [ 1036.948266][ T5917] ? kvmalloc_node+0x61/0x120 [ 1036.955622][ T5917] should_failslab+0x5/0x10 [ 1036.962536][ T5917] __kmalloc_node+0x75/0x390 [ 1036.969115][ T5917] kvmalloc_node+0x61/0x120 [ 1036.974966][ T5917] alloc_netdev_mqs+0x913/0xec0 18:41:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x600, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1036.981128][ T5917] ip6gre_tunnel_siocdevprivate+0xc48/0x1570 [ 1036.989694][ T5917] ? ip6erspan_tunnel_xmit+0x3020/0x3020 [ 1036.998230][ T5917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1037.006495][ T5917] ? full_name_hash+0xb5/0xf0 [ 1037.012731][ T5917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1037.020919][ T5917] ? netdev_name_node_lookup+0x108/0x150 [ 1037.028676][ T5917] dev_ifsioc+0xed5/0x10c0 [ 1037.035085][ T5917] ? sock_diag_broadcast_destroy+0x1a0/0x1a0 [ 1037.044209][ T5917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1037.054458][ T5917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1037.063536][ T5917] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 1037.072991][ T5917] dev_ioctl+0x28b/0xed0 [ 1037.080601][ T5917] sock_ioctl+0x537/0x640 [ 1037.088123][ T5917] ? br_ioctl_call+0xa0/0xa0 [ 1037.094686][ T5917] ? vfs_fileattr_set+0xbe0/0xbe0 [ 1037.103296][ T5917] compat_sock_ioctl+0x3a2/0x6d0 [ 1037.110721][ T5917] ? sock_ioctl+0x640/0x640 [ 1037.117143][ T5917] ? __fget_files+0x23d/0x3e0 [ 1037.123310][ T5917] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1037.133286][ T5917] ? sock_ioctl+0x640/0x640 [ 1037.140139][ T5917] __do_compat_sys_ioctl+0x1c7/0x290 [ 1037.149281][ T5917] __do_fast_syscall_32+0x65/0xf0 [ 1037.157676][ T5917] do_fast_syscall_32+0x2f/0x70 [ 1037.166623][ T5917] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.175858][ T5917] RIP: 0023:0xf6e9e549 [ 1037.182447][ T5917] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1037.209798][ T5917] RSP: 002b:00000000f44985fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1037.221010][ T5917] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 1037.233921][ T5917] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1037.248106][ T5917] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1037.259132][ T5917] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1037.271068][ T5917] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1037.286839][ T5917] 18:41:31 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x700, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:32 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020060000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) (fail_nth: 9) 18:41:32 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x900, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:32 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x3f, 0x4, 0xfffb, 0x3}}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x200c8001) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x17, 0x800, 0x70bd28, 0x25dfdbff, {0x1d}}, 0x14}, 0x1, 0x0, 0x0, 0x4040081}, 0x40004) [ 1037.409559][ T5933] FAULT_INJECTION: forcing a failure. [ 1037.409559][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.426669][ T5933] CPU: 2 PID: 5933 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1037.436973][ T5933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1037.448695][ T5933] Call Trace: [ 1037.453536][ T5933] [ 1037.457690][ T5933] dump_stack_lvl+0xcd/0x134 [ 1037.465207][ T5933] should_fail.cold+0x5/0xa [ 1037.470741][ T5933] _copy_to_user+0x2c/0x150 [ 1037.475143][ T5939] loop2: detected capacity change from 0 to 512 [ 1037.476546][ T5933] simple_read_from_buffer+0xcc/0x160 [ 1037.476703][ T5933] proc_fail_nth_read+0x187/0x220 [ 1037.476968][ T5933] ? proc_sessionid_read+0x220/0x220 [ 1037.477062][ T5933] ? security_file_permission+0xab/0xd0 [ 1037.477156][ T5933] ? proc_sessionid_read+0x220/0x220 [ 1037.477254][ T5933] vfs_read+0x1b5/0x600 [ 1037.477292][ T5933] ksys_read+0x12d/0x250 [ 1037.477321][ T5933] ? vfs_write+0xae0/0xae0 [ 1037.540309][ T5933] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1037.548034][ T5933] __do_fast_syscall_32+0x65/0xf0 [ 1037.554792][ T5933] do_fast_syscall_32+0x2f/0x70 [ 1037.561347][ T5933] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1037.569911][ T5933] RIP: 0023:0xf6e9e549 [ 1037.575025][ T5933] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1037.600631][ T5933] RSP: 002b:00000000f4498600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 1037.613293][ T5933] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f4498690 [ 1037.623053][ T5933] RDX: 000000000000000f RSI: 00000000f6fd4000 RDI: 0000000000000000 [ 1037.634372][ T5933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1037.644942][ T5933] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1037.657002][ T5933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1037.667041][ T5933] [ 1037.680118][ T5932] warn_alloc: 4 callbacks suppressed [ 1037.680139][ T5932] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1037.690616][ T5939] EXT4-fs (loop2): inodes count not valid: 32 vs 1568 [ 1037.714070][ T5932] CPU: 0 PID: 5932 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1037.714108][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1037.714124][ T5932] Call Trace: [ 1037.714137][ T5932] [ 1037.714150][ T5932] dump_stack_lvl+0xcd/0x134 [ 1037.714190][ T5932] warn_alloc.cold+0x87/0x17a [ 1037.714225][ T5932] ? zone_watermark_ok_safe+0x290/0x290 [ 1037.714261][ T5932] ? __kmalloc_node+0x62/0x390 [ 1037.785023][ T5932] ? __vmalloc_node_range+0x574/0xab0 [ 1037.793460][ T5932] __vmalloc_node_range+0x883/0xab0 [ 1037.801551][ T5932] ? vfree_atomic+0xe0/0xe0 [ 1037.808312][ T5932] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1037.816651][ T5932] ? __ldsem_down_read_nested+0x850/0x850 [ 1037.825068][ T5932] ? __wake_up_common+0x650/0x650 [ 1037.832323][ T5932] ? n_tty_open+0x16/0x170 [ 1037.838064][ T5932] vzalloc+0x67/0x80 [ 1037.843821][ T5932] ? n_tty_open+0x16/0x170 [ 1037.849148][ T5932] n_tty_open+0x16/0x170 [ 1037.854519][ T5932] ? n_tty_set_termios+0x1010/0x1010 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:32 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020070000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1037.861702][ T5932] tty_ldisc_open+0x9b/0x110 [ 1037.872299][ T5932] tty_ldisc_setup+0x43/0x100 [ 1037.878630][ T5932] tty_init_dev.part.0+0x1f4/0x610 [ 1037.885024][ T5932] ? pty_unix98_compat_ioctl+0x50/0x50 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x10, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1037.891569][ T5932] tty_init_dev+0x5b/0x80 [ 1037.898037][ T5932] ptmx_open+0x112/0x360 [ 1037.903590][ T5932] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1037.911475][ T5932] chrdev_open+0x266/0x770 [ 1037.918358][ T5932] ? cdev_device_add+0x210/0x210 [ 1037.926637][ T5932] ? fsnotify_perm.part.0+0x22d/0x620 [ 1037.934769][ T5932] do_dentry_open+0x4c8/0x1250 [ 1037.942122][ T5932] ? cdev_device_add+0x210/0x210 [ 1037.948507][ T5932] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4c00, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1037.956494][ T5932] ? may_open+0x1f6/0x420 [ 1037.960989][ T5932] path_openat+0x1cad/0x2750 [ 1037.965680][ T5932] ? path_lookupat+0x860/0x860 [ 1037.971719][ T5932] ? perf_trace_lock+0x2ef/0x4d0 [ 1037.977308][ T5932] ? check_path.constprop.0+0x50/0x50 [ 1037.983515][ T5932] do_filp_open+0x1aa/0x400 [ 1037.991038][ T5932] ? may_open_dev+0xf0/0xf0 [ 1037.996774][ T5932] ? rwlock_bug.part.0+0x90/0x90 [ 1038.002847][ T5932] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 18:41:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4c01, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1038.011419][ T5932] ? _find_next_bit+0x1e3/0x260 [ 1038.018512][ T5932] ? _raw_spin_unlock+0x24/0x40 [ 1038.026173][ T5932] ? alloc_fd+0x2f0/0x670 [ 1038.034152][ T5932] do_sys_openat2+0x16d/0x4d0 [ 1038.043610][ T5932] ? build_open_flags+0x6f0/0x6f0 [ 1038.051173][ T5932] ? find_held_lock+0x2d/0x110 [ 1038.057275][ T5932] ? __context_tracking_exit+0xb8/0xe0 [ 1038.065464][ T5932] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1038.072758][ T5932] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1038.081172][ T5932] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1038.094883][ T5932] __do_fast_syscall_32+0x65/0xf0 [ 1038.103386][ T5932] do_fast_syscall_32+0x2f/0x70 [ 1038.111140][ T5932] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1038.121608][ T5932] RIP: 0023:0xf6e9d549 [ 1038.129533][ T5932] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1038.159192][ T5932] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1038.171161][ T5932] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1038.183393][ T5932] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1038.195591][ T5932] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1038.207523][ T5932] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1038.219974][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1038.231452][ T5932] [ 1038.236218][ T5932] Mem-Info: [ 1038.241478][ T5932] active_anon:5169 inactive_anon:102878 isolated_anon:0 [ 1038.241478][ T5932] active_file:7142 inactive_file:43538 isolated_file:0 [ 1038.241478][ T5932] unevictable:768 dirty:96 writeback:0 [ 1038.241478][ T5932] slab_reclaimable:14903 slab_unreclaimable:47589 [ 1038.241478][ T5932] mapped:38982 shmem:1805 pagetables:1283 bounce:0 [ 1038.241478][ T5932] kernel_misc_reclaimable:0 [ 1038.241478][ T5932] free:26836 free_pcp:7847 free_cma:0 [ 1038.303325][ T5932] Node 0 active_anon:20236kB inactive_anon:143728kB active_file:4968kB inactive_file:3740kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6452kB dirty:40kB writeback:0kB shmem:4284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8848kB pagetables:1684kB all_unreclaimable? no [ 1038.350945][ T5932] Node 1 active_anon:480kB inactive_anon:267736kB active_file:23600kB inactive_file:170412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149476kB dirty:344kB writeback:0kB shmem:2992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2384kB pagetables:3416kB all_unreclaimable? no [ 1038.390879][ T5932] Node 0 DMA free:2720kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:408kB inactive_anon:7408kB active_file:144kB inactive_file:152kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:736kB local_pcp:236kB free_cma:0kB [ 1038.426565][ T5932] lowmem_reserve[]: 0 455 455 455 455 [ 1038.433643][ T5932] Node 0 DMA32 free:27308kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:19828kB inactive_anon:136320kB active_file:4824kB inactive_file:3588kB unevictable:1536kB writepending:40kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:9984kB local_pcp:1388kB free_cma:0kB [ 1038.471736][ T5932] lowmem_reserve[]: 0 0 0 0 0 [ 1038.478656][ T5932] Node 1 DMA32 free:77316kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:480kB inactive_anon:267736kB active_file:23600kB inactive_file:170412kB unevictable:1536kB writepending:344kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:20712kB local_pcp:3468kB free_cma:0kB [ 1038.520384][ T5932] lowmem_reserve[]: 0 0 0 0 0 [ 1038.527164][ T5932] Node 0 DMA: 8*4kB (UME) 2*8kB (ME) 7*16kB (UM) 8*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2720kB [ 1038.550596][ T5932] Node 0 DMA32: 457*4kB (UME) 335*8kB (UE) 129*16kB (UE) 200*32kB (UE) 88*64kB (UE) 28*128kB (UME) 6*256kB (UE) 3*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 27308kB [ 1038.572594][ T5932] Node 1 DMA32: 1199*4kB (UME) 1085*8kB (UME) 390*16kB (UME) 184*32kB (UME) 116*64kB (UME) 46*128kB (UME) 22*256kB (UM) 16*512kB (M) 10*1024kB (UME) 5*2048kB (M) 1*4096kB (U) = 77316kB [ 1038.599678][ T5932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.611762][ T5932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.626252][ T5932] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.641121][ T5932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.654491][ T5932] 12302 total pagecache pages [ 1038.660552][ T5932] 0 pages in swap cache [ 1038.666297][ T5932] Swap cache stats: add 0, delete 0, find 0/0 [ 1038.674462][ T5932] Free swap = 0kB [ 1038.679890][ T5932] Total swap = 0kB [ 1038.685765][ T5932] 524155 pages RAM [ 1038.691086][ T5932] 0 pages HighMem/MovableOnly [ 1038.697935][ T5932] 163149 pages reserved [ 1038.703866][ T5932] 0 pages cma reserved [ 1038.709572][ T5932] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:33 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xd73, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:33 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(r3) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2000000}]}, 0x1c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1fa5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) 18:41:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x541b, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:33 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020080000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:33 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="010000000000200000000000000000000000ba748e5e83e565204f491f4e4c082273681d57d105f6aade1daed975faa8dbf9c14af3fd7ddaf9b175d955c91392f1b86b080fa24c3969c7472d15a4bfd8481e230dfe23839ccb23d66d0823862fdeb20a6bbf2a93f356c86e9e14feeb85e6e9f234a54f9fa84f5d3a8bf88773ad538b1a2e4650a2693a466c1d2c6b0ca13b228d2570a106d7807ad67b8893707eedba902cc867614ae3df4e2b9b2365a811c71584cd5fb2478a79a87448830474e5169cc79e37cb728170ee8354814e34b57227ee0fab37272f0a", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5421, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5450, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1039.020837][ T5970] loop2: detected capacity change from 0 to 512 18:41:33 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x3f00, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:33 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) r6 = openat$vcs(0xffffff9c, &(0x7f00000006c0), 0x82282, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r9, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8}, @val={0xc, 0x99, {0x8001, 0x1e}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000020}, 0xc883) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003302c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5451, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1039.088639][ T5970] EXT4-fs (loop2): inodes count not valid: 32 vs 2080 [ 1039.213940][ T5970] loop2: detected capacity change from 0 to 512 [ 1039.278451][ T5970] EXT4-fs (loop2): inodes count not valid: 32 vs 2080 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5452, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020100000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x5460, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1039.422092][ T5988] loop2: detected capacity change from 0 to 512 [ 1039.448737][ T5988] EXT4-fs (loop2): inodes count not valid: 32 vs 4128 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x6364, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xff00, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000300dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x6609, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1039.691523][ T6006] loop2: detected capacity change from 0 to 512 18:41:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) dup(r0) [ 1039.719211][ T6006] EXT4-fs (loop2): invalid inodes per group: 196640 [ 1039.719211][ T6006] 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8910, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000500dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8911, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1039.898041][ T6020] loop2: detected capacity change from 0 to 512 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x32}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000015) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8913, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1039.949419][ T6020] EXT4-fs (loop2): invalid inodes per group: 327712 [ 1039.949419][ T6020] 18:41:34 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000600dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="04500000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8914, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1040.109605][ T6035] loop2: detected capacity change from 0 to 512 18:41:34 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x44) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r9 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000000040)={0xffff, 0x7, 0x2, 0x7, 0x6, [{0xe3b7, 0x2d2, 0x3, '\x00', 0x400}, {0x1, 0x4, 0x6, '\x00', 0x400}, {0x800, 0x143f, 0x2, '\x00', 0xa00}, {0x1290, 0x5, 0x9, '\x00', 0x2800}, {0x0, 0xa39f, 0x80000000000000, '\x00', 0x2209}, {0xb66, 0x8, 0x8, '\x00', 0x4}]}) 18:41:34 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x3000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1040.168440][ T6035] EXT4-fs (loop2): invalid inodes per group: 393248 [ 1040.168440][ T6035] 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891d, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:35 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ffffffffffffffff000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1040.291441][ T6035] loop2: detected capacity change from 0 to 512 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891e, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1040.379993][ T6035] EXT4-fs (loop2): invalid inodes per group: 393248 [ 1040.379993][ T6035] 18:41:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000700dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:35 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x8, 0x3, 0x5, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x81, 0x400}, 0x4000, 0xffffffffffffff81, 0x2, 0x8, 0x8, 0x9, 0x3, 0x0, 0x1, 0x0, 0xff}, 0xffffffffffffffff, 0x6, r1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x4000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x891f, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1040.458968][ T37] kauditd_printk_skb: 5 callbacks suppressed 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8920, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1040.459000][ T37] audit: type=1804 audit(1636483295.257:2722): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/71/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1040.497631][ T37] audit: type=1800 audit(1636483295.257:2723): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=0 errno=0 18:41:35 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x5000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8921, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1040.616121][ T6060] loop2: detected capacity change from 0 to 512 [ 1040.664781][ T6060] EXT4-fs (loop2): invalid inodes per group: 458784 [ 1040.664781][ T6060] 18:41:35 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:35 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020201000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1040.835136][ T6069] loop2: detected capacity change from 0 to 512 [ 1040.847316][ T6069] EXT4-fs (loop2): invalid inodes per group: 1056800 [ 1040.847316][ T6069] [ 1041.353213][ T37] audit: type=1804 audit(1636483296.147:2724): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/71/bus" dev="sda1" ino=1172 res=1 errno=0 [ 1041.442239][ T37] audit: type=1804 audit(1636483296.187:2725): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/71/bus" dev="sda1" ino=1172 res=1 errno=0 18:41:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8923, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:36 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020002000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:36 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="01000000000000000000000d0000000000"], 0x58}}, 0x0) [ 1041.497928][ T37] audit: type=1800 audit(1636483296.187:2726): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1172 res=0 errno=0 [ 1041.553189][ T6075] loop2: detected capacity change from 0 to 512 [ 1041.566775][ T6076] €: renamed from ip6gre0 [ 1041.594566][ T6078] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8924, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1041.633765][ T6075] EXT4-fs (loop2): invalid inodes per group: 2097184 [ 1041.633765][ T6075] [ 1041.662609][ T6081] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x7000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:36 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x2) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0) ioctl$FITHAW(r3, 0xc0045878) 18:41:36 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020102000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x8000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:36 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8927, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:36 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x18, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1041.942478][ T6098] loop2: detected capacity change from 0 to 512 [ 1042.024996][ T6098] EXT4-fs (loop2): invalid inodes per group: 2101280 [ 1042.024996][ T6098] 18:41:36 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c000000e3847185053380f06d3610f6a88aded32047909c98ce55950763d637827df1f8147d55eff2af7f47f1c44c844861a429784ce1cc3440694e4dc45fca8e477f1e73", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fbdbdf256a00000008000300", @ANYRES32=r5, @ANYBLOB="0500d2000c0000000500d200050000000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000000000500d2000c0000000a00060008021100000100000a0006000802110000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x4b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x7c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfd}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x39}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40040}, 0x24000044) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) 18:41:36 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x9000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:36 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020003f00dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1042.218354][ T6113] loop2: detected capacity change from 0 to 512 [ 1042.274762][ T6113] EXT4-fs (loop2): invalid inodes per group: 4128800 [ 1042.274762][ T6113] 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8929, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020004000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1042.319216][ T6114] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x3f000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8930, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1042.393609][ T6124] loop2: detected capacity change from 0 to 512 [ 1042.415227][ T6124] EXT4-fs (loop2): invalid inodes per group: 4194336 [ 1042.415227][ T6124] 18:41:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000334ded70319a0f983accf72909d46207c0a914d8e21eade94921c9fe5be4189a095e8226f91248486e7496f067ce041ec71fbd38cf687a95e9db25b535", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0x18, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x68}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0xff}, {0xc, 0x90, 0x1}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x48800) 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8931, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002000ff00dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d0000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001d8de4115dc49"], 0x58}}, 0x0) [ 1042.596741][ T6140] loop2: detected capacity change from 0 to 512 [ 1042.648274][ T6140] EXT4-fs (loop2): invalid inodes per group: 16711712 [ 1042.648274][ T6140] 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:37 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000fff4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x80ffffff, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1042.867760][ T6159] loop2: detected capacity change from 0 to 512 [ 1042.928937][ T6159] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1042.937586][ T6159] EXT4-fs (loop2): mount failed 18:41:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x81ffffff, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003400)=ANY=[], 0x20f0}, 0x1, 0x0, 0x0, 0x2400c0a0}, 0x8000) 18:41:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8937, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1043.039778][ T6159] loop2: detected capacity change from 0 to 512 [ 1043.046993][ T3924] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 18:41:37 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) recvfrom$phonet(r4, &(0x7f0000000040)=""/44, 0x2c, 0x0, &(0x7f0000000080)={0x23, 0x1f, 0x8, 0x1}, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1043.084631][ T6159] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1043.095163][ T6159] EXT4-fs (loop2): mount failed 18:41:37 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x82ffffff, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1043.227578][ T37] audit: type=1804 audit(1636483298.027:2727): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/80/bus" dev="sda1" ino=1158 res=1 errno=0 [ 1043.269172][ T37] audit: type=1800 audit(1636483298.027:2728): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1158 res=0 errno=0 18:41:38 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000200dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8942, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8943, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xff000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1043.601491][ T6196] loop2: detected capacity change from 0 to 512 [ 1043.634977][ T6196] EXT4-fs (loop2): invalid inodes per group: 131104 [ 1043.634977][ T6196] 18:41:38 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000300dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1043.795052][ T6202] loop2: detected capacity change from 0 to 512 [ 1043.840981][ T6202] EXT4-fs (loop2): invalid inodes per group: 196640 [ 1043.840981][ T6202] [ 1044.030263][ T37] audit: type=1804 audit(1636483298.827:2729): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/80/bus" dev="sda1" ino=1158 res=1 errno=0 18:41:38 executing program 3: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="b1e3c87f0000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e688640802110000011eeb579ac7003851483afd62e54e90d124e10b901473b341a23a7e1c6df8df703896bd811c070aa88bc7310fc6b4f10d61a28bee71244bc209e9229cdcd48a4caa235882b31cb501e49303153a0fd109e79bd2f5b58db519b1e3e877e1c9be00000058543c89afe69f0cfdd5a0c0884bc82f18c9ae2b626610cd4ed1c889c991887a8c4389cd0274021b3093ddeb89746471f286f2a7583cc40839b747abd1a5c6c2945a438d0f"], 0x58}}, 0x20004000) r3 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xd43b, @default, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 18:41:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8946, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:38 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000400dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1044.074944][ T37] audit: type=1804 audit(1636483298.847:2730): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/80/bus" dev="sda1" ino=1158 res=1 errno=0 [ 1044.110381][ T37] audit: type=1800 audit(1636483298.847:2731): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1158 res=0 errno=0 [ 1044.146461][ T6211] loop2: detected capacity change from 0 to 512 [ 1044.171063][ T6211] EXT4-fs (loop2): invalid inodes per group: 262176 [ 1044.171063][ T6211] 18:41:39 executing program 3: perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8947, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffff80, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1044.291329][ T6211] loop2: detected capacity change from 0 to 512 [ 1044.311853][ T6211] EXT4-fs (loop2): invalid inodes per group: 262176 [ 1044.311853][ T6211] 18:41:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffff81, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:39 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x490240, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000fa00003b7a4f13f100000000020000a6be4c455437fa4597a441158d28d01daa9de6ab5354601557fb51f08bc9486a3f5f6473f708972885c22bb207248b7b6dd74f540a0adfca965869db8f5bfa0329fd5b0ba3a09c6d64d36074b3f6a399811e220c415ac4736ac529169410d09c0ca17bb2d6623b59d396e4ef12d113fc965a7e2fb58a9397ae3fa93ac9928817c01928503c1ab03ded3f99ac6195704e040af7e845caee68903c8e2fb261cfebaf880b38e8298ba1f54bba8b18b15f40ef29022f785fe4130e4fe32634ea96fd6a7bb6e8074f0ee53cbc4b219d", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1044.389162][ T6232] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8948, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:39 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a1863f7ebed1fed, @perf_config_ext, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x800) lseek(0xffffffffffffffff, 0x0, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x561000, 0x102) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@ipv4={""/10, ""/2, @multicast1}, @in6=@local}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe4) syz_mount_image$affs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2, 0x8, &(0x7f00000006c0)=[{&(0x7f00000004c0)="0918480c527b5615ad83d3151bd853692be6806320831a83720ae0fa3c6010332fa0c92b4885ce48d689bce6b6338cf0dcce58d2fb7946884f29b08ed895899e5f50ce4d0f7c2bda93577c160a4e4929b97a81d78dc6a3fa4a4d30a787f45c1ce09ef18060823ce34fb480d6afa99de88117224c71d073cf8b35a73543fe5509100c48d8de88aebc7c918726a14fb28df76e169634775b18d3d7ec", 0x9b, 0x5}, {&(0x7f0000000340)="7d8ebd67230484a20cff69abf7975e52ffaa0f4b5abc811a2cf9c4e937bd66e5c75dc0f7b7eb2ae0954983742d9a7aa956240491398d52f6e8033b055880a3f8a5c712d15806e1f4ad2c2deb75e9a9a2174f60cb089bd4fdcdfcf6e211b113b9697d52204eb811e435efdda329f9b6ba55", 0x71, 0x1}, {&(0x7f00000005c0)="d2d71f13c098331a4e119faeb3cce541f690824898f85cba42bf760211", 0x1d, 0x7ffffffe}, {&(0x7f00000012c0)="4fc0e26722dfa07b73e5261b098e7e90ed6e360b0a5b9ec95aa93c1a4ed39d91b8be8872bb4690773d97c69ff3b65b9e32221807149a596cab45bd307088a1df0edf094ce0e35036fcf75d970699fa3b29b9c2828783b1cfef78ad64e2bfcfb42be8818c263c6d57da44612d8ada848786348b4e22790bde0feb000fdf05e7bb82b07e37799dc1033be64080b2e74ff0b1deaef8102b83bda90916a49cabf8a4a879b448bdf2b20955bdcfe9655a5ebff352eb7791ad7b8c81260ddf6ac21a388c59af38adc04180273254536154d44381cee0df171b3eedf396f43f574e073e3f0923dace5e2c9adad4e8646938059c0df119c3fe596358f7ff3c1953958fffb6d98429d8ff05fbb860d12edcba4289d71fd3597b125efc99a1a9a1f3c62a88a9367a888660704b4d2ebe57f3a13dc9773921a9f6d6c902821d91030004ea8a3efc4d608de3e32ff5672c7464fd797dae67b205c6276c9f5fad86362d8f375a8cf806d1feb25d44266b8eb7b22be8882eadc00e52ca37b8a40aebe822e6f6642578b4ebd05f5d5a928fc2afb87cee69d2a4fcef07ed6c4c38e21b837f08f060fcf9b78c80bee7ff4e3130b7f44f39ef13be0fe9c0190a85e142b4235894ca0c3170e1a8dfb5b1ff2f8e26768b6259788b8c04be84077cc29a542b183d99113b29492ca1d6cf0768cd88e077b485e982e7962e286c08eb7e90c3d82369c2b8a995b3b82c94575f444ca52b6a05c87e38a1cd29e4f5e19bd9f9865dc710ed6b5542409c2579caca6fe0ce9086451cc0e043ff6cc775ae181a691f06dd6bb33a70e3c64bc158a9a3ae4479ae144c98fd474581bbc4629ecadd64bf61ea2dc703c83d91cfd4e566a3df8586c88fc4ac2025c8c203102c9c7cb8ee6286dd8b50bca147b71f7b55e342744f6ba9de9f7d8529863d80c98629cb08a050c033375a5cfd48dcf1ddd358236844967a211d7a431a19be7c3e10318ed777fc951277c30364d8944a36262d70e5c942703efddc1b5141bdbe0321eb93c0eb2f9d057c721ddc290ac47e5c460bb8a9dbd5deff8d89c31ad7413ccd5a8cb171e42c7d23ac2a91fb9cdfeb1a1e12413b5fad3d7ec782abfc802a4ad90fe3e16b5985962d1f010b925006d6a53661c20b4ed9be1be431ed24231fb441b8b8bd06d50ee8d44c5affea66da3a25a148f2ef51836f1671504762fd89491abb019aae819201a9db98b320c9aa94c3679a823d35ed3da57051dae811ea4ae643623c812e28bb56ee34c95b434b8a719de8c9e7acba797ec81934db696015521ee5c492e16ea9e38908c325d49d0dac6959c170ccc42430b0d70a65fae2b70440f78315cacca8b155d4d01220907af16e76b44206b3483e604c321298a39d015de514efb42b9225f44141c9f5a88f637f462550addf56826bdbf08125f9cc6bc893449bc45f54e6f0ed86bdd164c2fbb559dbe2a19c20cc5c9c3d4f0b859f0425a4f383f08205d248d4b41cdd280aff8b0f136f92d010f986988c97970f8ade22f9fc17376617572d205a3750c5f68348208646e64cc26dbdcf4196188e4643101fd8b6c775ec32ce1ae5fb1b2a1ea07a004e40d9eb97ca271439804aae9f755f4194089afdfe2b10c5941b85366415b1b3430b12b56dd816ce77c9c70ac03889b852e9ed8a262db839fdfa262ab9bff5cd2a3d40f5ba42e0d14e44e19800ac7646bd81d1b6f2ec3379159b34cfc71ea8207d0ade5a9154d17a9d931630bd176d276417c9e33f99fb0293e93114f88143d2357f9993ca10aa1ec87e4abe2fb92e88e67610e116b1de6824cd7202cd248e31d8da15e67ccf2a0a0744390f74f4898cd0d778b414e4d0c174d29a42accd750a6d36f32f80e2ee991671dae14af5924cfb420d974d831763c1965b156bd1e9daa2d7ec1566a4e1f03a32788c935010f9926a72636f6e984fcadd7503a86455525b376305f3b4b47a16652566032e845b6ba7c57018b7cb32a68a862154d6d6214de2e25818e35cfeeab73b39771ccd6fb91819fa8aba3216b8dea3023062807ca7a36c5ca0977d009cfb83704474c18f7babd0419f96da94f218ef755c6846f883f36f0f5b623d0e6226867fb50b80e4a1ab3299b180889bd6e0dea0a25a00370e11d2426108b32fddfd4a47661766086417ee437654186e439c1c576b9812f0f8b23b3511c788e9cd1eaf2a070e1c1247a3a7bd97d1a4fa1c27d5b401e36b3eced78bc1f2743102d30d76384309b38afa2261865474242f630b1a6944ca3bb89ca821641ab85f08e4e690278034642d75663741fc569267ae0b973b8848aaebdb34079330cc0bd59ed6631408cd0848d54cba69d83b896996f48e2f668f3d97cafe78d66a9f5058ca3d9a11ff77cfd3398548fab04603b7353a7d31bdc03d54b5a065db68488974acd06ce946418258326f19598f6eb162fbb825a111be750fd05597680bc6aa14143cc68feabba9da011ef16d3b6c28d129e75ceb9467bec4f0b361a072c74e00649dea9fd82b125220fb9bf8701a42b029042703075be59146a50da886572566b325351c03e1dfd071ca692d2245419d8501ee7748af2e991c25fe3811684c418e325892cb6f0ad05598bacb5aee77c5ec05216eb986dce80993b62b96ff93ecaeadca49237352212ead893815f82183d557e95e4b0f653d088b4db410266099ace71b0c2f12d47ac354e91b78018d7fa838180fe27ed8767fc97b3a4bc7d59fda71d5d825f8db38dad796c559810311ef255206e3e95272aa259aaf9e92373deaaec61082cdbad0be2804d54a0097545221d4144d9b93dd9096750c0e44e9c8c7201e29d09519e1b795c6b020d7f9519e9b5d1b65c1ddf6bce4770a50986b12896420d40862d678dc09aeeb5ba5dd07de07a01b0158a8baf68d583b8fed1adeacac746b78c9eb613c17e6ac3e60eb177ea29a91854ada63c4e1d9c58f6053a4c40c81a482c994cf454fbfafb89a0322216dd3faeccba618e127db1cd30d1d54c2374c8886208f4000f7d72d80af6dd689ca0535e135634ad369e39b009de1eea28582f06c6721ace0af49e485b5217dc1819b1cef9b50a2524e15dc8fa903608d1e705b199508d298e04fd0af6ff638abf4db1aa360b178e1fc3bb07eb88ae7f8804cd33a4817c8d9e267970531fae54981e94f582cb99604c6bc35a156d6352bb636dde255e4682a4aff4d4897ad7fbc565084b80e2ce4df306c3050702fc38e39ad5d933594167b05de2850544fa04c0796de9546b68c1941e51633e5198ad84bf0e75c83b1da290fe7e7aa41501596d14e852aedd8bcb6d47ff273e97500544532854c2e24dc81b54e1531b8327d8b21f7160b418d8483a6ef3177079b68c00c0cab26fe1ec7147c204b3615be4659e93b54e46bb1d5e60da05d84a51521fbbee70817c105d5143c9705e1423b67f090fdcba09a013ed1dee85b4dd2f6afb01913678bfa6ba63b0c196fca066ef065af8d29e2f57e11664f0ce5d0425ca5e6763dfe8ef582e0256b3451a89f3c603fe1de98e2a0851f53269678bd66cba6cd648d19612ca77deaede135362ed57e6e43c5185bbacb6332a6854b141d3787f0922e767d944706bb75f6c5b253821ee9e13f9046e5a73f3b16b47dba87913a4f131718ac501675b41d163017ca396cabad5f3d82ef6141719f1bf52c93091836b4fa1f1b44ce90517c84a0ca6d3a149bb16197472a25e1c0f8bf9fad9dcabbe1acf60078e2ba6a8e31914ad6550f7a6f61270e04ceb814556cb8af3850f46af3ce55b31dd0ccedeccdbadfbe6fbd94c4964f6c52f224c9b6ee01266535e6ff7371348094346a468d918ea1f651f4171c8314003332124ccd1628ed7de75b3128b237134971367f093d7c8c953d19e56febac1f33f23f564a080735ef8a8edee6c1d24b00044c66cf9d0a1c2ddfe38c2868817db5b1cff9ccffca71de3a8e639cde9fdfae638d6443817634bb0b56e37bccacd2d62e0c2803f725747e3c3b7a9e35b579d85ead8021a3aebaafb56ddabb3962704566e61b3b7153b886ed006522e18a429367588c8c71ed648dd912c56e8739b22d4828aec0bdadd410f931c94d490ff4cddb40a1e69f2010f3fd3e17c3778a8b462f6ed4ac7348c52ff0dfe8c55f488392b5a9e2243d5462f089668a3c42547fa1f68c83c26cbf2ec9336f11daf61c9c9b77cea57f050333df97b272206b873fc222b8edec7dc205a991b9b423292f3afe51fa27c9ee615f023c2db51a63071c7ffb461c8daa9a0032aa5e15a357f4c3e039c75493e10ee8782af27e6ee38c72e601431e44b8f857ee238f94a63cd00d7720570a06e56f94784d2af3122a0882d52d75f3b45067467717b03d59b9ca3bc7580f31943748ce13bb9c7a5c7dce97195e7d01a6b81b6c207a5c3a3f4953c39dede3d1091da689e65c6c6ea8e8fae6fd5fca8a3211bc0282c56103579dfdb646744ee423b6835f2892181aab8cd956da741b7cb79a1ddb9884378d2ada9036db5da523f2c3a35f8f695c8a95259dca72f4f71a823f3280f5faa19c3f36616fc47086de00460c899b03470bc33c8e63c6c0588f9e3ea4b1d1a953931e166b00227d8d461f7dc8985bb90b28154b383309b7665093829e9aaff7a721836f1724ed4ce933e9478a5970ef3f23acf3c447b504027e429408741d5f2a65f0a36321a65147d0afd35aeea9e23aac17ba3c03408a6d25202fd2ed7bd47e52a64a3d52f30cac7f3130dcfc8491fc202805d8fd2d06af593a9b6d3759a199823c2fc9ce9c66c44d9fb1d4484b040784a3c0c608756de7afd0d38e85c374bf094d48c8a9498bc40e0ca946770ed9a8dccf046fd4e5539d52dc492a029c630db74f6006b2b488f43d1f6655cc90055ff3c68d4bd69cc278e195457b2a4c90ce7f6c20673031cb80838b6fa4c05908bf0f2479e98eb7ec1e479cad1b1d83cccc9454d3315b3f07613e2fbf4e98ae0fc0160ba8a2b23091513aba6743f7893aa1d0875dcecbe9b29a8a8de8e48f231681e363d8efb81b79cfab9fa976538cdf011a19c8905fbe84aa818346c8e70cd0d14bd078e326445f3f344e72d9048062975ed546f53b543ab13713828ed529a98999b6ad67bd4d3a29392acc300ea7e3a6a0781dc9b936f45a423a4984e6624b200866c9a1b0cfdf8509059709c26bda98adc073cd3d28cd77ee95406706d2ee68d23356ca9dd6bf7e785e74efbe8fbe1601969a3f362df484318925183ebd39de6a351ef82010328a9bf53ad27547ec3f9e3c1951e8c3809381fe3bce6186b9fe776767066590fc55b29448722685ba0c17ac2230300306d142fe200d43b09be777212d290bd05a8319d94c9ae61de69debf19bdf7e0fd5b543fd5ec6d361e5c537f5252841bfe0cd1cc9c068da89c5b2c119c447b429a158cff1ac331156d3eac556a72b5620161348c028f799906064f0623c7905a3d2a65eb1160b34bd8b8aada90e7afef2ba8a44b9b21c3dccd1ca0d09cdd25409366d1381b425a0fee70652943c647ebd39739dd742bda2458db010abcaeb480117b035dc6086b2a5a686af68fd760ec795f2981d682ee2db51410f1d71a8beaa823fb0a83b71744f8cdf3f076e976d3ddc4ebfcdf75d71e057bc1b99feec9487d57f294cc9831d794e71e35f0322c655ab2f64548cc192d646c24cc02f1050f0540b615cdbc080ff2e97dc1c1bf61583a058ad8b2922aaa7be5337d828e0de94c598a37f2e182bec7cd963783d727c4087b64a8879881363306531585d565a0c4063598c6d80c2e348d4d73b", 0x1000, 0x7fff}, {&(0x7f0000000580)="c9b7de23683f9888036a5e8255", 0xd, 0x8}, {&(0x7f00000022c0)="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", 0x1000, 0x800}, {&(0x7f0000000ac0)="3d45bd3161e3a6531a1597e4dd61aca42bc5964bb4e9b767e1f932a8c2174c68e0d4c6d7894ee3ebe7e7fcc1867b9d82a6898d770f08a2f30bf6e7ad16082d6bab017ea977a75ab2bd06a6133d57ead8739f393654abe1b53833108a2da82597e18a56633c0c0dff8de826df9670e9", 0x6f, 0x8}, {&(0x7f0000000640)="3a0f8ae0882b4aa527aa32161f28106e3639e32beb293126baa61f3dd84fb32d3bf6f41e7bb9bc7b1182fd2b4e5c1b237eb2d71fc036b19f3d339737ec9d163d13", 0x41, 0x4}], 0x8000, &(0x7f0000000b40)={[{'n\x00\x1a\xec\xd7d\x82\x02\x8f\x96\xec\xe3r\x9e\xe1\x7f\xf5\x93C\xa91\xb4\x8d\xb4\xb17\xf4\xb5\x15|\x98\x1e\x04\xfe\x0e\xe2\xe9\xec%\xdd\xe9\x0f\xbd\"\xd5v\xf3\xa5\x8c\x9e\x06\xed\xb60\x9e\xdc\xa2\x94#\xf5\xab\x13\xe9\x84\xdd{\xc3\x1b\n\xbd\x8aUz\x98\xd4\x17yfZZn#\x82\xaa\x90\x94`,\x95\xf4`~\xa8Q&\xb1J\x1b\x18\xc7\xe3\x83\x13\xcd\xcdg\v0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x19c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x23}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x8b2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x65, 0x6c, 0x3, 0x6, 0x60, 0x24, 0x4, 0x30, 0x6, 0x5, 0x18, 0x3, 0xc, 0x6, 0x9, 0x4, 0x4a, 0x5, 0x16, 0x12, 0x30]}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfb, 0x5, 0x8001, 0x6, 0xb46, 0x4, 0xf000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x357, 0x97, 0xe7a2, 0x8000, 0x1, 0xec, 0x8]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x7f, 0x6, 0x0, 0x6, 0x3ab, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_TWT_RESPONDER={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 18:41:39 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000500dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1044.525999][ T6243] loop2: detected capacity change from 0 to 512 [ 1044.526671][ T6237] loop3: detected capacity change from 0 to 264192 [ 1044.594512][ T6237] affs: Unrecognized mount option "n" or missing value [ 1044.594834][ T6243] EXT4-fs (loop2): invalid inodes per group: 327712 [ 1044.594834][ T6243] [ 1044.606339][ T6237] affs: Error parsing options 18:41:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffff82, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8949, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1044.769095][ T6243] loop2: detected capacity change from 0 to 512 [ 1044.776219][ T6245] loop3: detected capacity change from 0 to 264192 [ 1044.784580][ T6243] EXT4-fs (loop2): invalid inodes per group: 327712 [ 1044.784580][ T6243] [ 1044.821278][ T6245] affs: Unrecognized mount option "n" or missing value [ 1044.832047][ T6245] affs: Error parsing options 18:41:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:39 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000600dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x894a, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:39 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x8, 0x20, 0x1f, 0x0, 0x0, 0x0, 0x48100, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x6, 0x1f, 0x6, 0x7ff, 0x3a43, 0x0, 0x0, 0x6a56, 0x0, 0x100}, 0x0, 0xd, r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x90, 0x5, 0x7, 0x7, 0x0, 0x4c5, 0x890, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2090, 0x7, 0x0, 0x7, 0xa81, 0xffff, 0x6, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1044.966974][ T6260] loop2: detected capacity change from 0 to 512 [ 1044.987271][ T6260] EXT4-fs (loop2): invalid inodes per group: 393248 [ 1044.987271][ T6260] [ 1045.008698][ T6258] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:39 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9d787e99adac49cb422358000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:39 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8970, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1045.067705][ T6260] loop2: detected capacity change from 0 to 512 [ 1045.095250][ T6260] EXT4-fs (loop2): invalid inodes per group: 393248 [ 1045.095250][ T6260] 18:41:39 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c00903c39aa6f0ac6e2781590a9a679de5b130b2003233ff04808434e6f4d42a9743cb3d637a18b52acfb5cd368df7cb05217a258ca9844b66bae756d465b343bba8f236c7200e0ac5875092ff3022bdde4988a80ddf505406e36c8549f92e682708a2c44eaf8a5b3285a3c4604655d2ef78f807e5c92be108decaf3af12137bbb5fd11b03a25fc1f6fd3f9478db96d7c90c8cfa4941b3c4c2971f39ed661542d"], 0x58}}, 0x0) pipe(&(0x7f0000006940)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000006a80)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006a40)={&(0x7f00000069c0)={0x60, r6, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x830, 0x5a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "87db03de58"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x24044080) 18:41:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000700dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1045.310450][ T6290] loop2: detected capacity change from 0 to 512 18:41:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x2) poll(&(0x7f0000000300)=[{r9}], 0x1, 0x0) r10 = syz_open_dev$vcsu(&(0x7f0000000200), 0x0, 0x4002) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000002536605c35d1a126bf1482934534e180f8a680726dfde0a3451da02000ec537fe8a452d72fd22a12771a95faeab8497301d14965b59fe81ffed468f786807f78f8082248c1e", @ANYRES16=r8, @ANYRES64=r9, @ANYRES32=r7, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x418c0}, 0x0) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r8, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3677}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x20000450) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1045.377006][ T6290] EXT4-fs (loop2): invalid inodes per group: 458784 [ 1045.377006][ T6290] 18:41:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8990, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000800dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1045.609666][ T6304] loop2: detected capacity change from 0 to 512 [ 1045.630520][ T6297] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x3, 0x5, 0xfffffffb, 0x1c, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x8}, 0x8000, 0x80, 0xa3b, 0x5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r9, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x348, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc66}}}]}}, {{0x8, 0x1, r6}, {0x26c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x675, 0x6, 0x4, 0xda}, {0x7f, 0x3, 0x1, 0xe93a}, {0x0, 0x1, 0x4, 0x5}, {0xff81, 0x40, 0x7, 0x9}, {0x5, 0x0, 0x67, 0x1}, {0x7fff, 0x4f, 0x20, 0x8}, {0x1, 0x58, 0xa6, 0x7}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x44}, 0x801) r11 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x80000) r12 = dup(r11) dup3(r12, r0, 0x80000) [ 1045.702397][ T6304] EXT4-fs (loop2): invalid inodes per group: 524320 [ 1045.702397][ T6304] 18:41:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8992, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:40 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020001000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:40 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xfffffffe, 0x640140) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x41) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8993, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1045.973490][ T6324] loop2: detected capacity change from 0 to 512 18:41:40 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x420, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000010000de17000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000012c0)={0x1628, r6, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x15d8, 0x8, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ALLOWEDIPS={0x144, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @mcast2, 0x9}}]}, {0x84, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f1c021bdf068b92a911d5fcf2497de195688e2d7bdf2607cf2f4325446b12dff"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eeb6e2b2ac4276fda5ef50b56538e2f9b281be5728a9411be67952e938186567"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf1d, @mcast1, 0xfff}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x62, @dev={0xfe, 0x80, '\x00', 0x32}, 0x1}}]}, {0xaf4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x598, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x4c8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}]}]}, {0x2cc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "42d6d44ff273b7ee242added66e5fd8d0ff20c90817c4b64318ce608af86c128"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3dd012d8159878333ff3e21ea834f3dbe896e61890d423833963c69bcac31728"}]}, {0x4}, {0x558, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x20, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "320d2eab803e2d79733a5dd2c35b5715170cbebcc6098c898863d13086c16cdc"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @private1, 0x7}}, @WGPEER_A_ALLOWEDIPS={0x2b8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a370a6f40c7605d251a4d84fd336db4e063dc55527875830158eb633d4f0763c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x1628}, 0x1, 0x0, 0x0, 0x1}, 0x1) r7 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3d, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8, 0x0, 0x4}, r7, 0xa, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xd, 0x9, 0x9, 0x80, 0xc0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) kcmp$KCMP_EPOLL_TFD(r7, 0xffffffffffffffff, 0x7, r0, &(0x7f00000002c0)={0xffffffffffffffff, r8, 0x20}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x460386ac1d1db63c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x12, 0xffffff81, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="3c003300c0804d8dff2814e68864080211000001"], 0x58}}, 0x0) [ 1046.076524][ T6324] EXT4-fs (loop2): invalid inodes per group: 1048608 [ 1046.076524][ T6324] 18:41:40 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x7, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:40 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8994, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x8, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:41 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000003dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1046.378387][ T6343] loop2: detected capacity change from 0 to 512 [ 1046.395978][ T6343] EXT4-fs (loop2): invalid inodes per group: 50331680 [ 1046.395978][ T6343] 18:41:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8995, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c0033e400c0804d8dbf2814e68864080211000001d9c5b064762d278876ec101f5038a440"], 0x58}}, 0x0) 18:41:41 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000005dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x300, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89a2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1046.938123][ T6363] loop2: detected capacity change from 0 to 512 [ 1046.972351][ T6363] EXT4-fs (loop2): invalid inodes per group: 83886112 [ 1046.972351][ T6363] 18:41:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x500, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89a3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1047.096318][ T6363] loop2: detected capacity change from 0 to 512 [ 1047.109756][ T6376] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1047.123424][ T6363] EXT4-fs (loop2): invalid inodes per group: 83886112 [ 1047.123424][ T6363] 18:41:41 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x600, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:41 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000006dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:41 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40011}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:42 executing program 3: ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000040)={0xa080, 0x40, [0x8, 0x1, 0x20, 0x2], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = memfd_secret(0x80000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000440)={0x1, 0x1, 0x956, 0x7, 0x1, 0x1000}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc0fc4110, &(0x7f0000000280)={0x1f, [0x7, 0x6, 0x3], [{0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x80, 0x0, 0x1, 0x1}, {0x20, 0x1, 0x1}, {0xf2b5, 0x3fc, 0x1, 0x0, 0x1}, {0x3, 0x2}, {0xe5fd, 0x436, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x10000002, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0xb7c8, 0xecfe, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x3379, 0xfe95}], 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x700, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1047.397665][ T6398] loop2: detected capacity change from 0 to 512 18:41:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x900, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1047.447680][ T6398] EXT4-fs (loop2): invalid inodes per group: 100663328 [ 1047.447680][ T6398] 18:41:42 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000002", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250800000008000400b90000000800050001000080"], 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x40014) 18:41:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89b1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1047.543591][ T6398] loop2: detected capacity change from 0 to 512 [ 1047.576273][ T6398] EXT4-fs (loop2): invalid inodes per group: 100663328 [ 1047.576273][ T6398] 18:41:42 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000007dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xd73, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:42 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB="36ffcbb48f87cf5d8e80de43fed7a218954054ac9881c34eeb", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1047.742409][ T6422] loop2: detected capacity change from 0 to 512 [ 1047.792774][ T6422] EXT4-fs (loop2): invalid inodes per group: 117440544 [ 1047.792774][ T6422] 18:41:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) 18:41:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x3f00, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:42 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020002010dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:42 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5b9}]}, 0x4c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf6814e68864080211000001"], 0x58}}, 0x0) [ 1047.958706][ T6436] loop2: detected capacity change from 0 to 512 18:41:42 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x730d, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1047.985221][ T6436] EXT4-fs (loop2): invalid inodes per group: 270532640 [ 1047.985221][ T6436] 18:41:42 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000020dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:42 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001680)={0x5, 0x80, 0x1, 0x3f, 0x1, 0x3, 0x0, 0x40, 0x2400, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x5}, 0x0, 0xfff, 0x401, 0x5, 0x4, 0x3f, 0xfffc, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x1) r2 = signalfd4(r0, &(0x7f0000000080)={[0x40000000, 0xf2]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x1, 0xff, 0x8, 0x0, 0xf0, 0x8002, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2a6, 0x1, @perf_config_ext={0x75bd, 0xff}, 0x184, 0x80, 0x4, 0x7, 0x7, 0x80000001, 0x200, 0x0, 0x9fe, 0x0, 0x5}, r1, 0x7, r2, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b000000080003000f1485b735b3244f75d981a500982f0984b4db34a8edcc141a72cd23403f7dfdff479f06dd8c6e9cb35a97d0a70ac6", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1048.109795][ T6445] warn_alloc: 4 callbacks suppressed [ 1048.109829][ T6445] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1048.130701][ T6453] loop2: detected capacity change from 0 to 512 [ 1048.134067][ T6452] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:42 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000380)={&(0x7f0000000000)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000100)=""/238, 0xee}, {&(0x7f0000000200)=""/118, 0x76}, {&(0x7f0000000280)=""/10, 0xa}], 0x4, &(0x7f0000000300)=""/109, 0x6d}, 0x42) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1048.139432][ T6454] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1048.149921][ T6445] CPU: 1 PID: 6445 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1048.149947][ T6445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1048.149956][ T6445] Call Trace: [ 1048.149970][ T6445] [ 1048.149986][ T6445] dump_stack_lvl+0xcd/0x134 [ 1048.223338][ T6445] warn_alloc.cold+0x87/0x17a [ 1048.229769][ T6445] ? zone_watermark_ok_safe+0x290/0x290 [ 1048.238122][ T6445] ? __kmalloc_node+0x62/0x390 [ 1048.244039][ T6445] ? __vmalloc_node_range+0x574/0xab0 [ 1048.251136][ T6445] __vmalloc_node_range+0x883/0xab0 [ 1048.258437][ T6445] ? vfree_atomic+0xe0/0xe0 [ 1048.265040][ T6445] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1048.273470][ T6445] ? __ldsem_down_read_nested+0x850/0x850 [ 1048.281654][ T6445] ? __wake_up_common+0x650/0x650 [ 1048.288603][ T6445] ? n_tty_open+0x16/0x170 [ 1048.294314][ T6445] vzalloc+0x67/0x80 [ 1048.299621][ T6445] ? n_tty_open+0x16/0x170 [ 1048.305601][ T6445] n_tty_open+0x16/0x170 [ 1048.311119][ T6445] ? n_tty_set_termios+0x1010/0x1010 [ 1048.318273][ T6445] tty_ldisc_open+0x9b/0x110 [ 1048.324653][ T6445] tty_ldisc_setup+0x43/0x100 [ 1048.331468][ T6445] tty_init_dev.part.0+0x1f4/0x610 [ 1048.339071][ T6445] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1048.347656][ T6445] tty_init_dev+0x5b/0x80 [ 1048.352900][ T6445] ptmx_open+0x112/0x360 [ 1048.358228][ T6445] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1048.365968][ T6445] chrdev_open+0x266/0x770 [ 1048.371442][ T6445] ? cdev_device_add+0x210/0x210 [ 1048.379445][ T6445] ? fsnotify_perm.part.0+0x22d/0x620 [ 1048.386940][ T6445] do_dentry_open+0x4c8/0x1250 [ 1048.393522][ T6445] ? cdev_device_add+0x210/0x210 [ 1048.399963][ T6445] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1048.409476][ T6445] ? may_open+0x1f6/0x420 [ 1048.415453][ T6445] path_openat+0x1cad/0x2750 [ 1048.421773][ T6445] ? path_lookupat+0x860/0x860 [ 1048.428343][ T6445] ? perf_trace_lock+0xeb/0x4d0 [ 1048.435660][ T6445] ? check_path.constprop.0+0x50/0x50 [ 1048.443564][ T6445] do_filp_open+0x1aa/0x400 [ 1048.449300][ T6445] ? may_open_dev+0xf0/0xf0 [ 1048.455090][ T6445] ? rwlock_bug.part.0+0x90/0x90 [ 1048.461639][ T6445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1048.470379][ T6445] ? _find_next_bit+0x1e3/0x260 [ 1048.477942][ T6445] ? _raw_spin_unlock+0x24/0x40 [ 1048.484659][ T6445] ? alloc_fd+0x2f0/0x670 [ 1048.490226][ T6445] do_sys_openat2+0x16d/0x4d0 18:41:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xae01, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1048.496366][ T6445] ? build_open_flags+0x6f0/0x6f0 [ 1048.503719][ T6445] ? find_held_lock+0x2d/0x110 [ 1048.509677][ T6445] ? __context_tracking_exit+0xb8/0xe0 [ 1048.516718][ T6445] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1048.524417][ T6445] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1048.531751][ T6445] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1048.539616][ T6445] __do_fast_syscall_32+0x65/0xf0 [ 1048.546822][ T6445] do_fast_syscall_32+0x2f/0x70 [ 1048.553182][ T6445] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1048.562399][ T6445] RIP: 0023:0xf6e9d549 [ 1048.570774][ T6445] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1048.603530][ T6445] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1048.614318][ T6445] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1048.626639][ T6445] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1048.637764][ T6445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1048.649390][ T6445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1048.660417][ T6445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1048.671440][ T6445] [ 1048.675946][ T6445] Mem-Info: [ 1048.680155][ T6445] active_anon:5190 inactive_anon:102843 isolated_anon:0 [ 1048.680155][ T6445] active_file:7154 inactive_file:43533 isolated_file:0 [ 1048.680155][ T6445] unevictable:768 dirty:124 writeback:0 [ 1048.680155][ T6445] slab_reclaimable:14831 slab_unreclaimable:48082 [ 1048.680155][ T6445] mapped:39007 shmem:1813 pagetables:1294 bounce:0 [ 1048.680155][ T6445] kernel_misc_reclaimable:0 [ 1048.680155][ T6445] free:24075 free_pcp:11254 free_cma:0 [ 1048.698870][ T6453] EXT4-fs (loop2): invalid inodes per group: 536870944 [ 1048.698870][ T6453] 18:41:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xae41, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1048.734374][ T6445] Node 0 active_anon:20236kB inactive_anon:143692kB active_file:4992kB inactive_file:3716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6452kB dirty:48kB writeback:0kB shmem:4284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8860kB pagetables:1704kB all_unreclaimable? no 18:41:43 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020001020dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1048.734501][ T6445] Node 1 active_anon:524kB inactive_anon:267680kB active_file:23624kB inactive_file:170416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149576kB dirty:448kB writeback:0kB shmem:2968kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2400kB pagetables:3472kB all_unreclaimable? no [ 1048.734618][ T6445] Node 0 DMA free:2708kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:408kB inactive_anon:7404kB active_file:144kB inactive_file:152kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:612kB local_pcp:200kB free_cma:0kB [ 1048.734702][ T6445] lowmem_reserve[]: 0 455 455 455 455 [ 1048.734764][ T6445] Node 0 DMA32 free:27180kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:19828kB inactive_anon:136316kB active_file:4848kB inactive_file:3564kB unevictable:1536kB writepending:44kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:12376kB local_pcp:1416kB free_cma:0kB [ 1048.734958][ T6445] lowmem_reserve[]: 0 0 0 0 0 [ 1048.735015][ T6445] Node 1 [ 1048.825997][ T37] audit: type=1804 audit(1636483303.617:2732): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/103/bus" dev="sda1" ino=1163 res=1 errno=0 [ 1048.839583][ T6445] DMA32 free:66188kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:524kB inactive_anon:267680kB active_file:23624kB inactive_file:170416kB unevictable:1536kB writepending:448kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:31888kB local_pcp:11972kB free_cma:0kB [ 1048.839670][ T6445] lowmem_reserve[]: 0 0 0 0 0 [ 1048.839732][ T6445] Node 0 DMA: 19*4kB (UME) 3*8kB (UE) 1*16kB (U) 9*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2708kB [ 1048.839981][ T6445] Node 0 DMA32: 457*4kB (UME) 335*8kB [ 1048.880761][ T37] audit: type=1800 audit(1636483303.617:2733): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 1048.888445][ T6445] (UE) 129*16kB (UE) 200*32kB (UE) 88*64kB (UE) 27*128kB (UE) 6*256kB (UE) 3*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 27180kB [ 1049.163080][ T6445] Node 1 DMA32: 497*4kB (UME) 771*8kB (UME) 293*16kB (UME) 101*32kB (ME) 91*64kB (UME) 46*128kB (UME) 22*256kB (UM) 16*512kB (M) 9*1024kB (ME) 5*2048kB (M) 1*4096kB (U) = 65164kB [ 1049.196338][ T6445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.222603][ T6445] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1049.234238][ T6445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1049.258879][ T6445] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1049.282049][ T6445] 12333 total pagecache pages [ 1049.293499][ T6445] 0 pages in swap cache [ 1049.303712][ T6445] Swap cache stats: add 0, delete 0, find 0/0 [ 1049.321931][ T6445] Free swap = 0kB [ 1049.326749][ T6445] Total swap = 0kB [ 1049.334385][ T6445] 524155 pages RAM [ 1049.341315][ T6445] 0 pages HighMem/MovableOnly [ 1049.348510][ T6445] 163149 pages reserved [ 1049.354907][ T6445] 0 pages cma reserved [ 1049.361014][ T6445] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xff00, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xae60, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1049.473665][ T6468] loop2: detected capacity change from 0 to 512 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x400448c9, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1049.547403][ T6469] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x400448dd, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1049.565788][ T6468] EXT4-fs (loop2): invalid inodes per group: 537919520 [ 1049.565788][ T6468] [ 1049.659634][ T37] audit: type=1804 audit(1636483304.457:2734): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/103/bus" dev="sda1" ino=1163 res=1 errno=0 18:41:44 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x76fb6000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1049.711313][ T37] audit: type=1804 audit(1636483304.507:2735): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/103/bus" dev="sda1" ino=1163 res=1 errno=0 18:41:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x1000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x400454ca, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f00000000000000020000000200000000800000008000002000003fdcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1049.751550][ T37] audit: type=1800 audit(1636483304.507:2736): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 1049.805934][ T6483] loop2: detected capacity change from 0 to 512 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x400454cb, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1049.864403][ T6483] EXT4-fs (loop2): invalid inodes per group: 1056964640 [ 1049.864403][ T6483] 18:41:44 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000440), 0x880, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r5, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x4, 0x7, 0x7, 0x4265, 0x7f, 0x4, 0xfffa, 0xc59]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5d5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r6 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r6, 0x800) lseek(r6, 0x0, 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r6, r7, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) setsockopt$inet_dccp_buf(r7, 0x21, 0x80, &(0x7f0000000000)="29a51da970a5a6467ba7392ffc6e9a09269643c16c843eb678401388c8928454126ddf20573045221917e800a3b18ed77dd64303c42be2708cce5d47f057a29289f454f3c8edec89040c70b36c7f58be468693f8e50f1b85455882a390c46385edc76760b386af15ae172abdb44b6b3c559d0946c0e725611e4cb98b04da6dcfd9878378133a73093ffde9721d36e61189ede571784780b1da8374f03c48cd6d040ea14fd96e4dd85992604fdbbd53cce87c7be149ec3c85366b512ea0425475932ac1aa76150835a1c7c71ce0", 0xcd) 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4004560e, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x3000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1049.935278][ T37] audit: type=1804 audit(1636483304.737:2737): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/105/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1049.970585][ T37] audit: type=1800 audit(1636483304.737:2738): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40046602, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:44 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000040dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1050.080353][ T6506] loop2: detected capacity change from 0 to 512 18:41:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40047452, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1050.088464][ T37] audit: type=1804 audit(1636483304.857:2739): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/105/bus" dev="sda1" ino=1177 res=1 errno=0 18:41:44 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x4000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1050.125783][ T37] audit: type=1800 audit(1636483304.857:2740): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1050.166121][ T6506] EXT4-fs (loop2): invalid inodes per group: 1073741856 [ 1050.166121][ T6506] 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40047705, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:45 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/148, 0x94}], 0x4, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}], 0x88}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/155, 0x9b}], 0x1, &(0x7f00000008c0)=[@rights={{0xc}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/38, 0x26}, {&(0x7f00000009c0)=""/118, 0x76}], 0x2, &(0x7f0000000a80)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0xa8}}], 0x3, 0x2040, &(0x7f0000000c00)={r2, r3+10000000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r8, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x3e}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40008}, 0x48005) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, r8, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffff00d8, 0x14}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x3]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f0000000000000002000000020000000080000000800000200000ffdcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1050.290360][ T6515] loop2: detected capacity change from 0 to 512 [ 1050.320018][ T6515] EXT4-fs (loop2): invalid inodes per group: 4278190112 [ 1050.320018][ T6515] 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40049409, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:45 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0xb, 0xffffffffffffffff) mlock2(&(0x7f0000ff7000/0x5000)=nil, 0x5000, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1050.435952][ T6515] loop2: detected capacity change from 0 to 512 [ 1050.455939][ T6515] EXT4-fs (loop2): invalid inodes per group: 4278190112 [ 1050.455939][ T6515] 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40086602, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:45 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x5, 0x5, 0x81, 0x0, 0x4, 0x10140, 0x19, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x8000, 0x2}, 0x0, 0x0, 0xbe, 0x0, 0x7, 0x8, 0x22a2, 0x0, 0xb49e, 0x0, 0x6}, 0x0, 0x3, r1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1050.496803][ T6521] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x6000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4008ae89, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1050.576223][ T37] audit: type=1804 audit(1636483305.377:2741): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/108/bus" dev="sda1" ino=1173 res=1 errno=0 18:41:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000002dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x40186366, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:45 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x7000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1050.715447][ T6542] loop2: detected capacity change from 0 to 512 [ 1050.760429][ T6542] EXT4-fs (loop2): invalid inodes per group: 33554464 [ 1050.760429][ T6542] 18:41:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x401c5820, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:45 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000003dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1050.926996][ T6552] loop2: detected capacity change from 0 to 512 [ 1050.957072][ T6552] EXT4-fs (loop2): invalid inodes per group: 50331680 [ 1050.957072][ T6552] 18:41:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x8000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4020940d, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000004dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1051.501451][ T6556] loop2: detected capacity change from 0 to 512 [ 1051.517789][ T6556] EXT4-fs (loop2): invalid inodes per group: 67108896 18:41:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r5, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x800]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x5, 0x1, 0x3, 0xf90]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x953}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008810}, 0x40) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1051.517789][ T6556] 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x4020ae76, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1051.624120][ T6556] loop2: detected capacity change from 0 to 512 [ 1051.648034][ T6556] EXT4-fs (loop2): invalid inodes per group: 67108896 [ 1051.648034][ T6556] 18:41:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x9000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x402c5828, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000ceffc19000000001000000000000003cbbc87ee9bb8d4b936f31593f86c92fab87393b2e517d6c13f3045fa3f9ff9458d7e3515402bfb7a1fb8cc0e34f887fd7ae07cbc012112688dfbf30c1639111b28d5b87fa2a65b058dc26bb9038b419249cfda8db7abd5087b6a83b49b420303ac01168384d43e835c19d010078ce49affd82a9b79a7446756994cc833025743c9004128d8cd8773fb3124d182925b86adaf4120c5dec1a8fa404caad43777dd86acf8feb", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e688640802110001"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 18:41:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000005dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1051.736525][ T6572] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x402c5829, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1051.764232][ T6574] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x3f000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1051.808241][ T6578] loop2: detected capacity change from 0 to 512 [ 1051.826632][ T6578] EXT4-fs (loop2): invalid inodes per group: 83886112 [ 1051.826632][ T6578] 18:41:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x2) poll(&(0x7f0000000300)=[{r3}], 0x1, 0x0) sendfile(r2, r3, &(0x7f0000000000)=0x2, 0xffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x402c582a, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x402c582b, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000006dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x730d0000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = memfd_secret(0x80000) setsockopt$packet_int(r3, 0x107, 0x10, &(0x7f0000000000)=0x4, 0x4) [ 1052.018170][ T6596] loop2: detected capacity change from 0 to 512 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x402c5839, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1052.048717][ T6596] EXT4-fs (loop2): invalid inodes per group: 100663328 [ 1052.048717][ T6596] 18:41:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x80ffffff, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80046601, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:46 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000007dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:46 executing program 3: r0 = openat$vcsa(0xffffff9c, &(0x7f00000000c0), 0x105000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x20000000000001, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffff14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x3}}, 0x10) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7f, 0x6, 0x1f, 0xff, 0x0, 0xaa4f, 0xc0, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x9d45, 0x0, 0x7, 0x8, 0x6, 0x8, 0x0, 0x800, 0x0, 0xff}, 0x0, 0x6, r3, 0x2) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:46 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80086301, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x81ffffff, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1052.203172][ T6609] loop2: detected capacity change from 0 to 512 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x80086601, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1052.257769][ T6609] EXT4-fs (loop2): invalid inodes per group: 117440544 [ 1052.257769][ T6609] 18:41:47 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f90}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x82ffffff, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1052.363595][ T6609] loop2: detected capacity change from 0 to 512 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x801c581f, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1052.495346][ T6609] EXT4-fs (loop2): invalid inodes per group: 117440544 [ 1052.495346][ T6609] 18:41:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000008dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0045878, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:47 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001", @ANYRESDEC=0x0], 0x58}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2529, 0x57}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80000) 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0045878, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0xfe, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000900003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1052.703893][ T6640] loop2: detected capacity change from 0 to 512 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xff000000, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1052.753497][ T6640] EXT4-fs (loop2): invalid inodes per group: 134217760 [ 1052.753497][ T6640] 18:41:47 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000010dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:47 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="58e4ff00", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e6962fffc7acb01717"], 0x58}}, 0x0) 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc020660b, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc03864bc, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:47 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:47 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c00080211000001"], 0x58}}, 0x0) [ 1052.938386][ T6656] loop2: detected capacity change from 0 to 512 [ 1052.961088][ T6656] EXT4-fs (loop2): invalid inodes per group: 268435488 [ 1052.961088][ T6656] 18:41:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x4, 0x8, 0x81, 0x0, 0x90bb, 0x4, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xf0dc, 0x0, @perf_config_ext={0x101, 0x1ff}, 0x10000, 0x7ff, 0x8, 0x4, 0x9, 0x5c6, 0x81, 0x0, 0x1}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r4, &(0x7f0000000280)="7c387fff", 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:47 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc040563d, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1053.084271][ T6656] loop2: detected capacity change from 0 to 512 [ 1053.103039][ T6656] EXT4-fs (loop2): invalid inodes per group: 268435488 [ 1053.103039][ T6656] 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xffffff80, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:48 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000fff4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xd000943e, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:48 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x40088) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000280)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x8}, @in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa1}]}, &(0x7f0000000340)=0xc) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5b250090276483964b616ebe3abce1b11dc0f39e048ad4f5b90d24cd0cc939e75a0e8eedbedf818bcb027b874530c4eb8d3890a8e9c6398ec4a2c0740c51decc9fb7f6939965717b4fd00bd5ba0176d30cc1b33d787bf579fd1255ea6ea1b4bba55a6d60b3af85c91a7f0e086a7e7394", @ANYRES16, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0300000000000000bf2814e68864080211000001"], 0x58}}, 0x4000050) 18:41:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1053.261453][ T6674] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1053.269824][ T6680] loop2: detected capacity change from 0 to 512 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xffffff81, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:48 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800f0a1d03c0000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000afe94fce775f99f3d26cc6dddb21160008000315", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = openat$hpet(0xffffff9c, &(0x7f0000000180), 0xa0000, 0x0) perf_event_open(&(0x7f0000000100)={0xaea2d5b968e060b2, 0x80, 0x0, 0xe3, 0xe9, 0x2, 0x0, 0x5, 0x1022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0xa022, 0x2, 0x5, 0xd, 0x4, 0x8000, 0x1, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x4, r3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) [ 1053.315273][ T6680] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1053.324713][ T6680] EXT4-fs (loop2): mount failed 18:41:48 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4255fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:48 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1053.499800][ T6698] loop2: detected capacity change from 0 to 512 [ 1053.540577][ T6698] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1053.552235][ T6698] EXT4-fs (loop2): mount failed 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0xffffff82, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x1, 0x30, 0x7, 0xfff}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x9}, &(0x7f0000000240)=0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0xc0}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x54}}, 0x0) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x5}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0180010067e9fec05f7d43d6e7eb67000000", @ANYRES32=r7, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1053.634665][ T6707] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:48 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf45c5fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:48 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000980), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usbip_server_init(0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x2) poll(&(0x7f0000000300)=[{r7}], 0x1, 0x0) socketpair(0x25, 0x6, 0x6, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x2) poll(&(0x7f0000000300)=[{r9}], 0x1, 0x0) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="888dcb3bce1674bdb4a1bbee9a2760c0a9b080495e3d3da6c31c0598ad74dbee07b3164687e0ab4726b995cd1728671b7c9d227b935f936ef2ad9723087c7f8d69696df1f62cab15e7c1d00bf726f7aab10936df449faa62122b6fc535b544bbedc9efa3e51410d700e1c34860e206ab265ceff9df9052073047465fb4490e041136f7b4e4466f6fa3d9991e02e49e038e4283951b0b05219456d3393aef5ff0305a822d9af644b65aa796912b216f13f2b593a2ab55cb35a60480ebbe28269765a3717a0ccafcea38be4eaac33c92ae619d9fa7cdc868e0ce9e363981322cb146bd6b7419266465cf4a57e0494567fd5e8d4f59", 0xf4}, {&(0x7f0000000180)="e56d15fe79ee16a785736ad20fa4f3f9752894241c6331262539f1a6a446298baf4bcf58a64719e379cb7e0f5cac058f52055302f9ba2f45e7d047285a053c71e8af87d4196e87833d772ba65ed832b7da1d706e53be19fffb1f075b84fc0b616d7f8201b54781b1bb3eb612e56089", 0x6f}], 0x2, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000002c0)="f4f391c8748e2e6c771da9876b2c27324fa13154f888f02e84a155d9592cbcf9417fbb1adad9d513a08bb29eadc8b0c39c661510d980943fe82338c85f467aca109e13bacde82a840a9060336e367cb99fbc419cc890d537dbebe7fcc49771595d0589a68d28e624a58622a0ffa928885d0c289f16171d8e3fd849e38fa73f5112c1c383d8194a3b9416fa5ea1fdfbbcc21edaca5828560eff928718bf3c5cc2a2a14229d29ad6760abb42ef3ac26b2a1a7149f1f741c046a7ffed", 0xbb}, {&(0x7f00000004c0)="310c410d6ac249168724f74f3bcdaacaf4b5a232d612473389f0d8eb2799140e8788eb432a9b71c9160f3a719cdca7415a6bbf0070239e2fe2eccecb1cddcf9b859ddcf4c61d680d5a05094117d284687435dd7086f05be380dc039a252607f99591a041975e000e6fb2fe90997cd103ddc62f20c45bc53ceb008365c068e269b679b3404c2a21b180750231831ace0b6cd7b90a7da30cd51872ca6a44aa427247b3b053a1870c3734afd0f9edcc9bc825b4dcf32094acafbc3cf7dec01100f0da830a8ba61fe4cc72c425d0036b53a399f4e4b56d184e0dbf4fbb7fd5228439", 0xe0}, {&(0x7f0000000380)="3c2aa5c64361145caa55c3aa6e9efa614a6e0a91b26975ad443c741ceb0829968e8b6f565c110b9e88483334573f", 0x2e}, {&(0x7f00000005c0)="ab44312f849d23713d52752f3e5f87b1d6ca0cbc5c1e15f44e59bf3948792f8f8953262114e668e0b9b5bf210dd87b1bad75b3f03535eec8864b22b76bcdc636fa028f51bde1d923b09f55c2df9fdb3c48b9a83601f04a56593f2502189ded253ea3bf6e8df1b3b4d71a2d8c4293d815804e7a95051f6fec596de6cb3064b8f0fe125d6d25f475ac4ed01265c661ca4ad2f2323b418f8f74f1afd6", 0x9b}, {&(0x7f0000000680)="54e2a89a10fd65b85026d346f857c16633980efb6d81c35dc8a97d6ed9b1b477e9209c7f9f780c5ae75d9963b1cd6daa92f86f3b017991cadf1bb2435901f2015a6fd9f3369c7b3d0044a61a5b1cc7fc00ebf0fc3277d60efbcfe53c1e45736535bf2ea18773eb50e4e86bd8da73a951801f1e835d7c6a18b31ecfdf4f70ec007d627b2ff362cb5cb09c0d0e961cfbea1a71b95cedfd97", 0x97}, {&(0x7f0000000740)="d0f3772b4c274ac40da4b77337dc34dc95e12c54c4adda30f844181775b53115f15a6a4a7781d1b24e90ed3126d9dc72f06d4dac8b03e017c0af6dd67ec86250907f5c88f7019448391e7d5d81d4eb8cca28086c680c587f0d6620b8722e358d7ed239869aa4d1513b2ed5b218452ab49af9a86cfa46d9ec40a8a97faf6449e9a2a44ad51ef187f8f3d338598246c289125fd8902b67b8364abe3020ee0e8b6b77686e1ea527b5109b7c", 0xaa}, {&(0x7f0000000800)="5c3424c6f4b6a0b5a355fcf7e62b6a4b4b37ed1042e281d0a3f020809dabefb4ceedbce0e52cf9c87ef0dcde126df9381021e753be7b74688d06ed386c911ccb259888405418b10f1a3da8074273557728060560b87c34175d35897b4a0e57724463dd1fedde7f55e3b6d5336301c97fd5647d0fc9386b13204886752a739db499266f67668aa8aaff33a87d5b4d4a503bce2accafa79525ba936a6be7d081bce6a91c0650a16961731d41beec0eb3926f9c72d8eddf743a2e4353819db7de9a4c51e52cd494192676e01a0be364d7a3629b84f3bffcc109e76b1790ff17377163192104d0318c69f60607", 0xeb}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000440)="b6af8974f867ff8444fb27dee916b43bc91fa3dc389f8fee1b855eca8bc97553dfd9aa361e193797907d567fd3e5166fb1420f4637471a4aa2808828", 0x3c}], 0x9, &(0x7f0000000ac0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r5, r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r7, r5, r6]}}], 0x6c, 0x50}}], 0x2, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x0) [ 1053.776626][ T6719] loop2: detected capacity change from 0 to 512 [ 1053.821216][ T6717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1053.830078][ T6717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1053.844239][ T6717] vhci_hcd vhci_hcd.0: Device attached [ 1053.860543][ T6719] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1053.868741][ T6723] vhci_hcd: connection closed [ 1053.870315][ T6719] EXT4-fs (loop2): mount failed [ 1053.892640][ T3750] vhci_hcd: stop threads [ 1053.900380][ T3750] vhci_hcd: release socket [ 1053.906953][ T3750] vhci_hcd: disconnect device 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:48 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:48 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4255f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:48 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1054.141463][ T6739] loop2: detected capacity change from 0 to 512 18:41:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1054.232063][ T6739] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1054.241874][ T6739] EXT4-fs (loop2): mount failed 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:49 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf45c5f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1054.392639][ T6752] loop2: detected capacity change from 0 to 512 [ 1054.412877][ T6728] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 1054.421835][ T6728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1054.431562][ T6728] vhci_hcd vhci_hcd.0: Device attached [ 1054.449062][ T6752] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1054.454636][ T6754] vhci_hcd: connection closed [ 1054.458301][ T6752] EXT4-fs (loop2): mount failed [ 1054.470964][ T3415] vhci_hcd: stop threads [ 1054.479666][ T3415] vhci_hcd: release socket [ 1054.486096][ T3415] vhci_hcd: disconnect device 18:41:49 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r1 = syz_open_dev$vcsa(&(0x7f00000005c0), 0x0, 0x2c0200) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x70, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x24004004}, 0x200c2801) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB="581000b1", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1054.553151][ T6759] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x6, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:49 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0200ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:49 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@type={'type', 0x3d, "428486d5"}}, {@creator={'creator', 0x3d, "72cb211f"}}, {@gid}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe4) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv6_getaddr={0x88, 0x16, 0x400, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0xa, 0xfe, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x2b0}, @IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x580}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x88}, 0x1, 0x0, 0x0, 0x854}, 0x4000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1054.699598][ T6775] loop2: detected capacity change from 0 to 512 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1054.760517][ T6775] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1054.773174][ T6775] EXT4-fs (loop2): mount failed [ 1054.812453][ T6782] hfs: can't find a HFS filesystem on dev loop3 18:41:49 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0300ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1054.977950][ T6796] loop2: detected capacity change from 0 to 512 [ 1054.980837][ T6782] hfs: can't find a HFS filesystem on dev loop3 [ 1055.044751][ T6793] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1055.062327][ T6796] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1055.073494][ T6796] EXT4-fs (loop2): mount failed 18:41:49 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:49 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r4, r5, 0x0, 0x8400fffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x0, 0x9, 0x4, 0xb, 0x1, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0xd0, 0x5d, &(0x7f0000000300)=""/93, 0x41000, 0x10, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x0, 0x5e0, 0x8}, 0x10, 0x0, r4}, 0x74) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYBLOB="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"], 0x1d0}, 0x1, 0x0, 0x0, 0x1400c810}, 0x24008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x80, 0x6, 0x6, 0xfb, 0x0, 0x3700, 0x81009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x6, 0xffffffffffff358c}, 0x40480, 0x1, 0x9, 0x8, 0x8, 0x2, 0x1, 0x0, 0x54, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:49 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1055.145755][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1055.145776][ T37] audit: type=1804 audit(1636483309.937:2746): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/127/bus" dev="sda1" ino=1167 res=1 errno=0 [ 1055.190072][ T37] audit: type=1800 audit(1636483309.937:2747): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=0 errno=0 18:41:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x300, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0400ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1055.316150][ T37] audit: type=1804 audit(1636483310.107:2748): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/127/bus" dev="sda1" ino=1167 res=1 errno=0 [ 1055.342238][ T6816] loop2: detected capacity change from 0 to 512 [ 1055.353557][ T37] audit: type=1800 audit(1636483310.107:2749): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1167 res=0 errno=0 18:41:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:50 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x66}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x255}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x92}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x94e3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x7fff, 0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x81, 0xef]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xff]}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x2006086}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x500, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1055.458767][ T6816] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1055.480134][ T6816] EXT4-fs (loop2): mount failed [ 1055.573526][ T6816] loop2: detected capacity change from 0 to 512 18:41:50 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x198, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_IE={0x18, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @device_b, @device_b}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc6, 0xfc, "dd34fa3739c5ef05d488f6dae6c1ef616501e9c78a172470de292418657d72419387fd1ad99a7e5675c9eeb18dc26d39802e96387dfef15d14809b791d15c9e0407e0b0ad59f17b089209659c14d83dbe044d9fb4bfefb28bd0e85a66a8086370351f1675fd77451d8fad29fef95928ee4fc72a4bebfed2e1216ec5be5dafec77db1dff333038a445d28da9579a154c124aaaa44532425db1be1ab3da1c0af10d8ce6d248cb66bb1a920b04befad025d19b60886f3289f0d9127a5230cd2131d59cd"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "0d3babb14ace467c0691e8012874"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x52, 0xfc, "33eef4cbdc40cb73ea3643cf45bb529779ecbf53bd1693a8c99161371cd44fc2a1686e5f063fabb0b9548e2eff984703e242950e3f408322192ec8787d4b701e3313b3f9caf4ce10127944938b27"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "c2dc71dbe94b23ffa9bf0e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x101}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}]]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x400c001) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x600, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1055.675059][ T6816] EXT4-fs: failed to create workqueue [ 1055.681478][ T6816] EXT4-fs (loop2): mount failed 18:41:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1055.717625][ T6829] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0500ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x700, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x2) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xbc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYBLOB="2f00040000afeef3624d00000000002add19698fdaa91812ffdbde37e0a23a05319496823e031c0d43c78870044327a7c7f9fec711000000ea0c3ebc190b5207a944ed55bcc1f3f88b2a442c460c42f5fa87289e04000000b56967cd4063fe633f6bbb5bc5837a90a4000000000000000000000000000006eea1881d38fdb97b1fb2338678a0402625d72809c145d744833e4af28cc8a05b7d676cb12c5eb31bee7b6662805ce75fc5bb4c056958dfe09cbc3b1f4b729bccf224556e18e2d72d08e531c035348868cacbdb5fb746977665ed0055d8fe967c752ddb454ef0d0e0ada1daf4cf95b50589d343f17b4dcc67e350f6b376e768966610bfef6316fe75b54aa369d0f97e96484cabbf03eb02bc6227db046c18babe95d0d121d1e15c96952b03f9ca4595bc7044742a6157998d9f9aaf96712911efc724bff8957d60f8dc02efd9d80644c75f13fbf8a33c932f6f782cf762bfefd8e6a4834a6680e3b1f2c74ce6c06a212b854ffa30054d021adf6567db966a1c93f138bd455170f42201c2f5e24e7d8298498432e8f4a9b549a811b6d64d16b5c2ebb2896abb3a0a66c66a799f273d6c0e04d71c52fe4ad4803ac9897641e1729734ece88a537e01f5e165553a68a8403b8e6f46d20e4ce839758ec819f2136336339843efc486e94c0b8933004f5796bd04646eac65e78f65ae3fa3dbd4293ef50b407cabbd214791a6a1652b57eeedf3de3e96cb37581cc7fa8a8342abcdd0e11358384f89f1876f2d89efb5c64550d320bbe13eb1e6dc50216255611bc0aaaeafc35c93922ea3e6ce7975e4b150057bed219134dbf51e55ec1b4f3ae6a8"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053580)={0x219, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x8, "76ecb79257e855"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r3, 0x1, 0x7, 0x6, 0x4, 0x4, 0xfffffffffffff0cb, 0xae5, 0x0, 0xe34c, 0x7fffffff, 0x9, 0x2, 0x26, 0xffffffffffffff81}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000012c0)={r3, 0x2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x40010, 0xffffffffffffffff, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f1dfee0120e5030320", @ANYRES32=r6, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1055.896261][ T6844] loop2: detected capacity change from 0 to 512 [ 1055.947327][ T6844] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1055.962389][ T6844] EXT4-fs (loop2): mount failed 18:41:50 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x900, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:50 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0700ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1056.132962][ T6857] loop2: detected capacity change from 0 to 512 [ 1056.159378][ T6857] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1056.175182][ T6857] EXT4-fs (loop2): mount failed 18:41:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xd73, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0800ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1056.415465][ T6867] loop2: detected capacity change from 0 to 512 [ 1056.474703][ T6867] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1056.485175][ T6867] EXT4-fs (loop2): mount failed 18:41:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="3c003300c0804d8dbf28149a8864080211000001"], 0x58}}, 0x0) 18:41:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x3f00, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1056.605507][ T6867] loop2: detected capacity change from 0 to 512 [ 1056.644102][ T6867] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1056.653431][ T6867] EXT4-fs (loop2): mount failed 18:41:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e60091e40000000000000013207508000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1056.716136][ T6880] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0a00ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x730d, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x86000, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x76, 0x4, 0x2, 0x41, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd1, 0x1, @perf_bp={&(0x7f0000000380), 0x4}, 0x4, 0xfffffffffffffff9, 0x5b9, 0x2, 0x5, 0x2, 0x3f, 0x0, 0x92a, 0x0, 0x4}, 0x0, 0x8, r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x109300, 0x9) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000012c0)={{r3}, 0x0, 0x12, @inherit={0x60, &(0x7f0000000080)={0x1, 0x3, 0x200, 0x8, {0x18, 0xfffffffffffffffc, 0x9, 0x9000000000000000, 0xc760}, [0x45932004, 0x0, 0x7]}}, @subvolid=0x101}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x0) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20000010) [ 1056.867072][ T6896] loop2: detected capacity change from 0 to 512 [ 1056.877971][ T6894] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xff00, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1056.919225][ T37] audit: type=1804 audit(1636483311.717:2750): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/133/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1056.958643][ T37] audit: type=1800 audit(1636483311.717:2751): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 [ 1057.004716][ T6896] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1057.021111][ T6896] EXT4-fs (loop2): mount failed 18:41:51 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x1000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1057.100794][ T37] audit: type=1804 audit(1636483311.877:2752): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/syzkaller-testdir966773473/syzkaller.7KAOz0/133/bus" dev="sda1" ino=1177 res=1 errno=0 [ 1057.134718][ T37] audit: type=1800 audit(1636483311.877:2753): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 18:41:51 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x2) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x7, 0x6, 0x1, 0x800, 0x4, [{0x9, 0x9, 0x7, '\x00', 0x400}, {0xc6, 0x8, 0x9, '\x00', 0x100}, {0x6435, 0x3, 0x0, '\x00', 0x406}, {0x81, 0x400, 0x2, '\x00', 0x178b}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:51 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0b00ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x2000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1057.242078][ T6924] loop2: detected capacity change from 0 to 512 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x2) poll(&(0x7f0000000300)=[{r1}], 0x1, 0x0) ioctl$FITHAW(r1, 0xc0045878) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1057.272100][ T6924] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1057.283606][ T6924] EXT4-fs (loop2): mount failed 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x3000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @private0, @mcast2}}) [ 1057.359234][ T6924] loop2: detected capacity change from 0 to 512 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r2, 0x800) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f00000000c0)='./bus/file0\x00', 0x86000, 0x14) sendfile(r2, r3, 0x0, 0x8400fffffffa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4004240b, &(0x7f0000000040)={0x1, 0x80, 0x6, 0x80, 0x4, 0x81, 0x0, 0x0, 0x100, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x20, 0x81, 0x1, 0x2, 0x2, 0x1ff, 0x8f, 0x0, 0x148, 0x0, 0x3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x2) poll(&(0x7f0000000300)=[{r4}], 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x2) poll(&(0x7f0000000300)=[{r5}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x2) poll(&(0x7f0000000300)=[{r6}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRESHEX, @ANYBLOB="0100000000000093143e5dae915d72900000003b0000003e4f2b83eab656cda853dfd846f304045cf9d5ba83861569a70a85c3c720e6dd2e6d9d19c2c23728483e8e1683bf5c56d8d5cfd0fbac2e235a0098c12b2c4381fd357c381e961e87a33f8e517f74", @ANYRES32=r1, @ANYBLOB='\x00'/10], 0x58}}, 0x0) [ 1057.409661][ T6924] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1057.418655][ T6924] EXT4-fs (loop2): mount failed 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x4000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @private0, @mcast2}}) 18:41:52 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0c00ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x5000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x701}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x200000c4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1057.649528][ T6953] loop2: detected capacity change from 0 to 512 [ 1057.696701][ T6953] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1057.705514][ T6953] EXT4-fs (loop2): mount failed 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001505050505050"], 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x178, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x91e, 0x21}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x45bd}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xd7, 0xbe, "afc9d736f30ba81945ab9e467c532a058a2ddc9eee6897b21fe7affcbba8cba53f0a16f43be19b8d3e0331a53175ce2d5db559759a357ccc8ad59ff549ccfc9d228e21e93346ac386a8b521b2128b91c4c5ccdb48dafcea24cdee0b0ae438370e5aed43cf6bcf03bdb632c5a13750036b9e2b29e96fc2b5df211a875e26bea8ecc61cb298288b2cc12f872ec3a5578a105a7be8d8a95af984e090b3ff1964dfe29892f89d0842288c82e3d9efb620292e942dd792540f480c73871df79398b8250c172bdfedc272f39263a3a545c84ac17a9d0"}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x50, 0xac, "0edf3434182c28b5ba801610259405831512cf73d54c0d09ef084ecd5d9e80231cd3c1b2a5b18697423e4fa2b7032570fa2469b121e79dd0959130b6750faf498d21397af932a82bac703e7b"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x2a3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x990) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:52 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f1000ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @private0, @mcast2}}) 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x6000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1057.857299][ T6969] loop2: detected capacity change from 0 to 512 [ 1057.872680][ T6969] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1057.887047][ T6969] EXT4-fs (loop2): mount failed 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000030000000091d87953d2b124366f22518ca6dcab41ea02d95fe4e40b1946708e0c7241333824256ca662c7b0d8e675fc5133764d0ffd67", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:52 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f1400ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1058.024975][ T6979] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1058.045083][ T6980] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. 18:41:52 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x7000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1058.090491][ T6983] loop2: detected capacity change from 0 to 512 18:41:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @private0, @mcast2}}) 18:41:52 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x8000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:53 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000340)={&(0x7f0000000280)=[0x2, 0x6], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7ff, 0x37eda16255e7ad12}) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x47, 0xffff0241, 0xfff, 0xfffffffa], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x162d4e2c9317eff0}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="01e2bad17fe31514d3162a937a84d8780f9ef1978cf0", @ANYRES16=r6, @ANYBLOB="200225bd7000fbdbdf256500000008000300", @ANYRES32=r3, @ANYBLOB="0c00990006000000510000001c0003800c0000800800030099ab00000c0000800800030001040000080002000000000008000100010001000800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x60800) [ 1058.225066][ T6983] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1058.239621][ T6983] EXT4-fs (loop2): mount failed [ 1058.369088][ T6983] loop2: detected capacity change from 0 to 512 18:41:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x2) poll(&(0x7f0000000300)=[{r2}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000008030b583ab8c99eb8f4c40b577625b31f62926f7d8cfe131001c04e8592ec29befc399ba3b43b4b07bacd4cd05b17c74c813f8e1d56a7f87774243fa789a5714a2f2dfe21b1c491f371f141180a1b17f37d9274546d43a2f5ee57040912ca671020a73e29b2f625f4346d12f54273f3bed575f7001c141fe989e165f17d0425b65ce26c86d7c70b251d73a509a4a844ed200", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRESHEX=r2, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}, 0x1, 0x0, 0x0, 0x5000}, 0x1) 18:41:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, @private0, @mcast2}}) [ 1058.411119][ T6983] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1058.420040][ T6983] EXT4-fs (loop2): mount failed 18:41:53 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f3700ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) r3 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080), 0x400000, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000012c0)={0x1da8, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "aa5d4d7d22188afaacbf6e6ce8007583ddbca61629bf7cfc09e4ec9d5b96ddded357806c464d86292a5f7ef2cedbae78bb071a931029ec2d73c411e4ccdec3ffde0f16c8e3b996adb5c841d1963a0584479b54a96fbccfcc19a1aa9d5ec0780157babdf0a3908aedd986df24c3b52e4a81fe0fc6e0178028b535d029e91904de861bfb2b192522ba11140e986372246ca51464eadceef9a1d9c07277c476bced96896fdcaf31e067a3e5c984430fbc991d3413c841e5ef402edbed6e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "8f8a466a7b19f5392970aa9dab48974664307a1194736653045f15f83fd04596a0227bcbdbba42270bbe55635fffa2e61c1b1a94e28064dcd0ed9a2f72fb55f268db7246bcd0505533fa8583455068a835b9a17c44ff89188470175c5424e8e4f1588e1c4b216f610ac265436615967e083dc635a0011b50e14ba938f54913699422379259886de5a1858b298ac90f0136458750a8e0efffdf09e645a0d174bc17780edb8213ec49473bb3b6b7ea0fae"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "30c3888b7ce9c260727664c209590d36aa8d3069c12c"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x68, 0x5, "4a7affbb3428b1b185a18f169ed125a3fe2207b36c265ac4ec24e444575a9d9d6f234538f6765590aeba2b0b6b19770bc595175f151b96a2a115fa7825d56d36802bc5b6c5376969cb90a282846a8c32c2cab67eca9c7fdb91b0c4fd83dec491a4ddc6b8"}, @ETHTOOL_A_BITSET_VALUE={0x3f, 0x4, "c5e9759d44330865bfc145da102a91c1f24d7cd77a9d8d6aa78a501b9c2a2ffda47750f7fd6f9e4c4c995e607121ae5366bb36a76113406e028e1b"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1504, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x154, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.\\-*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2a1d5857}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%(\xf1!'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '(%)}+&*^\\+^)}&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.:^@,]%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x148, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x638a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3e9e}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#:\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcdbb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd8e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '_-*!\'\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']@\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '.'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ']#{\xa3$,}\x18\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "4b6c1f8c1af1c4eb1962b08c77d4b48f1f6cdf92c51041d0f56651240ab06c41d55a5edd2bf8effd542b74ecea619597cd570b001b3d8c2664e7be574caeb6e3c9f07f64a68bda991e8929b7e859451868519a65b0faa625ea93587ef39b06bdd3d358565b3830f7ae1a176a1ec0c907f4ceb11fffe8e95eeeff395ac5dec767e5b0f2cd4f2b72bd585c488d2f50e082943b708fdda8413187af35f9c21ad14fbcc2a50ffdca1148b29b25a570c426526301d438ee3059f1a083d7"}, @ETHTOOL_A_BITSET_MASK={0x94, 0x5, "5d3a3a4bbd9f277b489539356ba6a9b7a24908eb87808e72189aa873423f0bd50f4a63ad07eb62648673900bb06613629cf017adebaac43ef351183e60adc5530619edab2bae3675be256b4cd86d50e04f40981c0d1b4b34b8e146c8955fe7d025cb1edafa518d65af3eb5e5fc358be41796472e25c898fbf63e3e93a35eea04da50993780c96ebf539135d43465860a"}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "01110061b81c114cd1b5c8dcd24a92fe7e399e0ab7f8bf8b48016b4350f77e6b32f9f07f005a9e77dfd60adc96bcbdfbadd100ad39619299f660ad2d2fb44e038df26d517365c23f00f82eefed667e02e904100e0b43137f8d6545d512"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x22c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x46, 0x5, "ee9b3e2bd7408bbc98b07ba32d3e68f0652c12a48b5a38997657378fdb046cc79840d36b4d509397e41267cd721b28573e60dc69db60168e5b723ee537cb7dcd46c6"}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "7f5ffbbf43fbf7b1b662cffd9dc9438ead0bd167b6effe49025d49b5aee3c2c13c50561cd64e491aed0b556d863ae06920dbb75b0edade8e8d29e5359745c0583e0fdc278eadd61b9baf49390d95df6ea42ff1f7dab3738bf3e9fd62c7a7e3d0b9ebf2e8fe10a640ad10f836d14d91f9fad59a01fe2c34e4227f0f4598132866425949f660d41d43cd9ab467f8650d6ba15ff03b81508b008dd86078f7494641b08ea93c88d99ec85fab48c0d979ab2aaf5cddb8b72e95a8761f0410ccd2f1d3391506519f634eb615ed47dad4795b195679a2ee86a2e3300ae0ee35e247423b94f8145a530d4689a7c344ed3ae70f"}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+{*\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_VALUE={0x34, 0x4, "ff797f34f3b5f465d64221ecb897722bcdab218ddfd080e80ad94c46232136315401479bffb9d8cd4a14ff7c96278ae3"}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0xc3, 0x4, "2ead1c23b0cad4ddfce3d85d8bf53c9471bd3bfd1ed0720208485ac72643a774aec1dc854c1276203369dfc916aea6220d1bfcab48076d1656ead6d27998752ae1b297db0fcac4e1d4e85be1cc82f931fc461b989832d7d9745f0aca4328e0c18e3dab5439f486ef876dff6a91da17c2edcf0c023896dad91e83992e7b9a43f82aa8f561a6e8dd5e28dfe7645dfbb901e9dbca40eefb53962c89493ff71f96487770752ef9239dd4a12398d7c2857485e9800dd574c53060b498335cb368e3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x294, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb74}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd2e}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd89}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8a}]}]}, @ETHTOOL_A_BITSET_MASK={0xdb, 0x5, "85756442427e2ae21d8878c608d7154014cec95cc910a17a3744bda47a4853c4e268deb7362508c565f0d58abd4ce8a9dded0f1984586c66d0c0ed7486540928fa27dfaa10740c037b4932c55cc468aca8517259b224fbd0e7491773b53ee2b7e4aabc7fb4de1a2b5c5ec41eab371bdffa0b7f65046429fe719938e2c7a9c10f40f70b97c36b7de0409aa70023636ca1ad899a2bd71b194423a1f32e8b4c35d4433a3e88629f30a49cdaf30c99151cead41eba633ba007b6b7ab0cd38c68486dff1a84e1b553ca7c531f767100b884c8479c7b7f12ee93"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xbe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x1da8}, 0x1, 0x0, 0x0, 0x44044}, 0x4000) 18:41:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x9000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0xc000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0b9880f804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @private0, @mcast2}}) 18:41:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) [ 1058.720165][ T7020] loop2: detected capacity change from 0 to 512 18:41:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x3f000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x730d0000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1058.835313][ T7020] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1058.847638][ T7020] EXT4-fs (loop2): mount failed [ 1058.982424][ T7020] loop2: detected capacity change from 0 to 512 [ 1059.015572][ T7020] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1059.025313][ T7020] EXT4-fs (loop2): mount failed 18:41:53 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0052ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:53 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x1000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @private0, @mcast2}}) 18:41:53 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x80ffffff, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1059.238377][ T7043] loop2: detected capacity change from 0 to 512 [ 1059.238758][ T7037] warn_alloc: 8 callbacks suppressed [ 1059.238779][ T7037] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1059.257598][ T7043] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1059.280051][ T7037] CPU: 3 PID: 7037 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1059.287814][ T7043] EXT4-fs (loop2): mount failed [ 1059.299754][ T7037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1059.299776][ T7037] Call Trace: [ 1059.299802][ T7037] [ 1059.299815][ T7037] dump_stack_lvl+0xcd/0x134 [ 1059.299925][ T7037] warn_alloc.cold+0x87/0x17a [ 1059.339982][ T7037] ? zone_watermark_ok_safe+0x290/0x290 [ 1059.348969][ T7037] ? __kmalloc_node+0x62/0x390 18:41:54 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f00ffffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1059.357155][ T7037] ? io_schedule_timeout+0x180/0x180 [ 1059.365097][ T7037] ? __vmalloc_node_range+0x574/0xab0 [ 1059.374082][ T7037] __vmalloc_node_range+0x883/0xab0 [ 1059.382998][ T7037] ? vfree_atomic+0xe0/0xe0 [ 1059.390085][ T7037] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1059.398802][ T7037] ? __ldsem_down_read_nested+0x850/0x850 [ 1059.408387][ T7037] ? __wake_up_common+0x650/0x650 [ 1059.416757][ T7037] ? n_tty_open+0x16/0x170 [ 1059.422742][ T7037] vzalloc+0x67/0x80 [ 1059.427915][ T7037] ? n_tty_open+0x16/0x170 [ 1059.434259][ T7037] n_tty_open+0x16/0x170 [ 1059.439943][ T7037] ? n_tty_set_termios+0x1010/0x1010 [ 1059.447782][ T7037] tty_ldisc_open+0x9b/0x110 [ 1059.454989][ T7037] tty_ldisc_setup+0x43/0x100 [ 1059.462067][ T7037] tty_init_dev.part.0+0x1f4/0x610 [ 1059.468675][ T7037] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1059.475945][ T7037] tty_init_dev+0x5b/0x80 [ 1059.481491][ T7037] ptmx_open+0x112/0x360 [ 1059.486824][ T7037] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1059.493746][ T7037] chrdev_open+0x266/0x770 [ 1059.500701][ T7037] ? cdev_device_add+0x210/0x210 [ 1059.506916][ T7037] ? fsnotify_perm.part.0+0x22d/0x620 [ 1059.513728][ T7037] do_dentry_open+0x4c8/0x1250 [ 1059.519941][ T7037] ? cdev_device_add+0x210/0x210 [ 1059.526610][ T7037] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1059.534964][ T7037] ? may_open+0x1f6/0x420 [ 1059.540453][ T7037] path_openat+0x1cad/0x2750 [ 1059.546701][ T7037] ? path_lookupat+0x860/0x860 [ 1059.553034][ T7037] ? perf_trace_lock+0xeb/0x4d0 [ 1059.559636][ T7037] ? check_path.constprop.0+0x50/0x50 [ 1059.566871][ T7037] do_filp_open+0x1aa/0x400 [ 1059.573223][ T7037] ? may_open_dev+0xf0/0xf0 [ 1059.580143][ T7037] ? rwlock_bug.part.0+0x90/0x90 [ 1059.585969][ T7037] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1059.594231][ T7037] ? _find_next_bit+0x1e3/0x260 [ 1059.601084][ T7037] ? _raw_spin_unlock+0x24/0x40 [ 1059.609443][ T7037] ? alloc_fd+0x2f0/0x670 [ 1059.616405][ T7037] do_sys_openat2+0x16d/0x4d0 [ 1059.622390][ T7037] ? build_open_flags+0x6f0/0x6f0 [ 1059.628601][ T7037] ? find_held_lock+0x2d/0x110 [ 1059.635343][ T7037] ? __context_tracking_exit+0xb8/0xe0 [ 1059.643311][ T7037] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1059.651701][ T7037] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1059.659200][ T7037] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1059.668679][ T7037] __do_fast_syscall_32+0x65/0xf0 [ 1059.673968][ T7037] do_fast_syscall_32+0x2f/0x70 [ 1059.679610][ T7037] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1059.687928][ T7037] RIP: 0023:0xf6e9d549 [ 1059.693375][ T7037] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1059.725088][ T7037] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1059.736387][ T7037] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1059.747988][ T7037] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 18:41:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @private0, @mcast2}}) 18:41:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @private0, @mcast2}}) [ 1059.759620][ T7037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1059.770599][ T7037] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1059.780323][ T7037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1059.792041][ T7037] [ 1059.797066][ T7037] Mem-Info: [ 1059.801256][ T7037] active_anon:5141 inactive_anon:102991 isolated_anon:0 [ 1059.801256][ T7037] active_file:7160 inactive_file:43533 isolated_file:0 [ 1059.801256][ T7037] unevictable:768 dirty:134 writeback:0 [ 1059.801256][ T7037] slab_reclaimable:14872 slab_unreclaimable:48198 [ 1059.801256][ T7037] mapped:39015 shmem:1771 pagetables:1302 bounce:0 [ 1059.801256][ T7037] kernel_misc_reclaimable:0 [ 1059.801256][ T7037] free:22017 free_pcp:10228 free_cma:0 [ 1059.859083][ T7037] Node 0 active_anon:20208kB inactive_anon:143724kB active_file:4992kB inactive_file:3716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6452kB dirty:48kB writeback:0kB shmem:4256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:8848kB pagetables:1684kB all_unreclaimable? no [ 1059.900830][ T7037] Node 1 active_anon:356kB inactive_anon:268140kB active_file:23648kB inactive_file:170416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149608kB dirty:488kB writeback:0kB shmem:2828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 88064kB writeback_tmp:0kB kernel_stack:2360kB pagetables:3424kB all_unreclaimable? no [ 1059.945054][ T7037] Node 0 DMA free:2720kB boost:0kB min:720kB low:900kB high:1080kB reserved_highatomic:0KB active_anon:404kB inactive_anon:7408kB active_file:144kB inactive_file:152kB unevictable:0kB writepending:4kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:612kB local_pcp:52kB free_cma:0kB [ 1059.982126][ T7037] lowmem_reserve[]: 0 455 455 455 455 [ 1059.989009][ T7037] Node 0 DMA32 free:27180kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:19804kB inactive_anon:136316kB active_file:4848kB inactive_file:3564kB unevictable:1536kB writepending:44kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:12872kB local_pcp:1616kB free_cma:0kB [ 1060.032070][ T7037] lowmem_reserve[]: 0 0 0 0 0 [ 1060.039734][ T7037] Node 1 DMA32 free:57916kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:356kB inactive_anon:268140kB active_file:23648kB inactive_file:170416kB unevictable:1536kB writepending:488kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:27500kB local_pcp:3852kB free_cma:0kB [ 1060.082213][ T7037] lowmem_reserve[]: 0 0 0 0 0 [ 1060.089041][ T7037] Node 0 DMA: 6*4kB (M) 1*8kB (E) 0*16kB 12*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 2720kB [ 1060.108815][ T7037] Node 0 DMA32: 457*4kB (UME) 335*8kB (UE) 129*16kB (UE) 200*32kB (UE) 88*64kB (UE) 27*128kB (UE) 6*256kB (UE) 3*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 27180kB [ 1060.135285][ T7037] Node 1 DMA32: 461*4kB (UME) 769*8kB (UME) 290*16kB (ME) 95*32kB (ME) 66*64kB (ME) 37*128kB (UME) 22*256kB (UM) 16*512kB (M) 9*1024kB (ME) 5*2048kB (UM) 0*4096kB = 57916kB [ 1060.158674][ T7037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.172209][ T7037] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1060.185256][ T7037] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1060.202329][ T7037] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1060.216951][ T7037] 12258 total pagecache pages [ 1060.224293][ T7037] 0 pages in swap cache [ 1060.230327][ T7037] Swap cache stats: add 0, delete 0, find 0/0 [ 1060.239762][ T7037] Free swap = 0kB [ 1060.244810][ T7037] Total swap = 0kB [ 1060.249938][ T7037] 524155 pages RAM [ 1060.255065][ T7037] 0 pages HighMem/MovableOnly [ 1060.261615][ T7037] 163149 pages reserved [ 1060.267281][ T7037] 0 pages cma reserved 18:41:54 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private0, @mcast2}}) [ 1060.273010][ T7037] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:55 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x2) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xbc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000300)={@local}) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000440)={@dev={0xfe, 0x80, '\x00', 0x42}, @mcast1, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053580)={0x219, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x8, "76ecb79257e855"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{r3, 0x1, 0x7, 0x6, 0x4, 0x4, 0xfffffffffffff0cb, 0xae5, 0x0, 0xe34c, 0x7fffffff, 0x9, 0x2, 0x26, 0xffffffffffffff81}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000012c0)={r3, 0x2}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8400fffffffa) syz_io_uring_setup(0x1411, &(0x7f00000001c0)={0x0, 0x15a5, 0x0, 0x2, 0x126}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x40010, 0xffffffffffffffff, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="f1dfee0120e5030320", @ANYRES32=r6, @ANYBLOB="3c003300c0804d8dbf2814e68864080211000001"], 0x58}}, 0x0) 18:41:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @private0, @mcast2}}) 18:41:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x81ffffff, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1060.498520][ T7076] loop2: detected capacity change from 0 to 512 [ 1060.555294][ T7076] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1060.564435][ T7076] EXT4-fs (loop2): mount failed 18:41:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0102ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @private0, @mcast2}}) 18:41:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x82ffffff, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1060.725722][ T7084] loop2: detected capacity change from 0 to 512 [ 1060.748286][ T7084] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1060.760115][ T7084] EXT4-fs (loop2): mount failed [ 1060.888797][ T7086] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:55 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0103ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:55 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1061.044874][ T7090] loop2: detected capacity change from 0 to 512 [ 1061.086688][ T7090] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1061.094832][ T7090] EXT4-fs (loop2): mount failed 18:41:56 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000dc0)={'wlan1\x00'}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000980), 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usbip_server_init(0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r7, 0x2) poll(&(0x7f0000000300)=[{r7}], 0x1, 0x0) socketpair(0x25, 0x6, 0x6, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x2) poll(&(0x7f0000000300)=[{r9}], 0x1, 0x0) r10 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="888dcb3bce1674bdb4a1bbee9a2760c0a9b080495e3d3da6c31c0598ad74dbee07b3164687e0ab4726b995cd1728671b7c9d227b935f936ef2ad9723087c7f8d69696df1f62cab15e7c1d00bf726f7aab10936df449faa62122b6fc535b544bbedc9efa3e51410d700e1c34860e206ab265ceff9df9052073047465fb4490e041136f7b4e4466f6fa3d9991e02e49e038e4283951b0b05219456d3393aef5ff0305a822d9af644b65aa796912b216f13f2b593a2ab55cb35a60480ebbe28269765a3717a0ccafcea38be4eaac33c92ae619d9fa7cdc868e0ce9e363981322cb146bd6b7419266465cf4a57e0494567fd5e8d4f59", 0xf4}, {&(0x7f0000000180)="e56d15fe79ee16a785736ad20fa4f3f9752894241c6331262539f1a6a446298baf4bcf58a64719e379cb7e0f5cac058f52055302f9ba2f45e7d047285a053c71e8af87d4196e87833d772ba65ed832b7da1d706e53be19fffb1f075b84fc0b616d7f8201b54781b1bb3eb612e56089", 0x6f}], 0x2, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000002c0)="f4f391c8748e2e6c771da9876b2c27324fa13154f888f02e84a155d9592cbcf9417fbb1adad9d513a08bb29eadc8b0c39c661510d980943fe82338c85f467aca109e13bacde82a840a9060336e367cb99fbc419cc890d537dbebe7fcc49771595d0589a68d28e624a58622a0ffa928885d0c289f16171d8e3fd849e38fa73f5112c1c383d8194a3b9416fa5ea1fdfbbcc21edaca5828560eff928718bf3c5cc2a2a14229d29ad6760abb42ef3ac26b2a1a7149f1f741c046a7ffed", 0xbb}, {&(0x7f00000004c0)="310c410d6ac249168724f74f3bcdaacaf4b5a232d612473389f0d8eb2799140e8788eb432a9b71c9160f3a719cdca7415a6bbf0070239e2fe2eccecb1cddcf9b859ddcf4c61d680d5a05094117d284687435dd7086f05be380dc039a252607f99591a041975e000e6fb2fe90997cd103ddc62f20c45bc53ceb008365c068e269b679b3404c2a21b180750231831ace0b6cd7b90a7da30cd51872ca6a44aa427247b3b053a1870c3734afd0f9edcc9bc825b4dcf32094acafbc3cf7dec01100f0da830a8ba61fe4cc72c425d0036b53a399f4e4b56d184e0dbf4fbb7fd5228439", 0xe0}, {&(0x7f0000000380)="3c2aa5c64361145caa55c3aa6e9efa614a6e0a91b26975ad443c741ceb0829968e8b6f565c110b9e88483334573f", 0x2e}, {&(0x7f00000005c0)="ab44312f849d23713d52752f3e5f87b1d6ca0cbc5c1e15f44e59bf3948792f8f8953262114e668e0b9b5bf210dd87b1bad75b3f03535eec8864b22b76bcdc636fa028f51bde1d923b09f55c2df9fdb3c48b9a83601f04a56593f2502189ded253ea3bf6e8df1b3b4d71a2d8c4293d815804e7a95051f6fec596de6cb3064b8f0fe125d6d25f475ac4ed01265c661ca4ad2f2323b418f8f74f1afd6", 0x9b}, {&(0x7f0000000680)="54e2a89a10fd65b85026d346f857c16633980efb6d81c35dc8a97d6ed9b1b477e9209c7f9f780c5ae75d9963b1cd6daa92f86f3b017991cadf1bb2435901f2015a6fd9f3369c7b3d0044a61a5b1cc7fc00ebf0fc3277d60efbcfe53c1e45736535bf2ea18773eb50e4e86bd8da73a951801f1e835d7c6a18b31ecfdf4f70ec007d627b2ff362cb5cb09c0d0e961cfbea1a71b95cedfd97", 0x97}, {&(0x7f0000000740)="d0f3772b4c274ac40da4b77337dc34dc95e12c54c4adda30f844181775b53115f15a6a4a7781d1b24e90ed3126d9dc72f06d4dac8b03e017c0af6dd67ec86250907f5c88f7019448391e7d5d81d4eb8cca28086c680c587f0d6620b8722e358d7ed239869aa4d1513b2ed5b218452ab49af9a86cfa46d9ec40a8a97faf6449e9a2a44ad51ef187f8f3d338598246c289125fd8902b67b8364abe3020ee0e8b6b77686e1ea527b5109b7c", 0xaa}, {&(0x7f0000000800)="5c3424c6f4b6a0b5a355fcf7e62b6a4b4b37ed1042e281d0a3f020809dabefb4ceedbce0e52cf9c87ef0dcde126df9381021e753be7b74688d06ed386c911ccb259888405418b10f1a3da8074273557728060560b87c34175d35897b4a0e57724463dd1fedde7f55e3b6d5336301c97fd5647d0fc9386b13204886752a739db499266f67668aa8aaff33a87d5b4d4a503bce2accafa79525ba936a6be7d081bce6a91c0650a16961731d41beec0eb3926f9c72d8eddf743a2e4353819db7de9a4c51e52cd494192676e01a0be364d7a3629b84f3bffcc109e76b1790ff17377163192104d0318c69f60607", 0xeb}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000440)="b6af8974f867ff8444fb27dee916b43bc91fa3dc389f8fee1b855eca8bc97553dfd9aa361e193797907d567fd3e5166fb1420f4637471a4aa2808828", 0x3c}], 0x9, &(0x7f0000000ac0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0, r10}}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r5, r8, r9]}}, @rights={{0x18, 0x1, 0x1, [r7, r5, r6]}}], 0x6c, 0x50}}], 0x2, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000480)=ANY=[], 0x58}}, 0x0) 18:41:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xff000000, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0104ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @private0, @mcast2}}) [ 1061.373999][ T7103] loop2: detected capacity change from 0 to 512 [ 1061.450922][ T7103] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1061.462997][ T7103] EXT4-fs (loop2): mount failed [ 1061.477178][ T7105] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1061.485048][ T7105] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1061.497142][ T7105] vhci_hcd vhci_hcd.0: Device attached 18:41:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @private0, @mcast2}}) 18:41:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1061.538722][ T7110] vhci_hcd: connection closed [ 1061.539084][ T9] vhci_hcd: stop threads [ 1061.552765][ T9] vhci_hcd: release socket [ 1061.561630][ T9] vhci_hcd: disconnect device 18:41:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0105ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1061.641927][ T7122] loop2: detected capacity change from 0 to 512 [ 1061.668891][ T7122] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, @private0, @mcast2}}) [ 1061.679266][ T7122] EXT4-fs (loop2): mount failed [ 1061.797821][ T7122] loop2: detected capacity change from 0 to 512 [ 1061.859269][ T7122] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1061.871490][ T7122] EXT4-fs (loop2): mount failed 18:41:56 executing program 3: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8971, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:41:56 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xffffff80, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:56 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x337, 0x0, @private0, @mcast2}}) 18:41:56 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0106ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1062.139469][ T7138] loop2: detected capacity change from 0 to 512 [ 1062.187338][ T7138] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xffffff81, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1062.197241][ T7138] EXT4-fs (loop2): mount failed 18:41:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x6000000, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1062.268965][ T7144] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, @private0, @mcast2}}) [ 1062.316746][ T7138] loop2: detected capacity change from 0 to 512 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0xffffff82, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1062.378380][ T7138] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1062.387126][ T7138] EXT4-fs (loop2): mount failed 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, @private0, @mcast2}}) 18:41:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0107ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, @private0, @mcast2}}) [ 1062.646697][ T7167] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3703, 0x0, @private0, @mcast2}}) [ 1062.769114][ T7177] loop2: detected capacity change from 0 to 512 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x0, "0000000300000007db82456fa79c812600"}) [ 1062.851171][ T7177] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1062.859805][ T7177] EXT4-fs (loop2): mount failed 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, @private0, @mcast2}}) [ 1063.020428][ T7177] loop2: detected capacity change from 0 to 512 [ 1063.078435][ T7177] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1063.094538][ T7177] EXT4-fs (loop2): mount failed 18:41:57 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0108ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:57 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:57 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, @private0, @mcast2}}) 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1063.332349][ T7207] loop2: detected capacity change from 0 to 512 18:41:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, @private0, @mcast2}}) 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1063.428512][ T7207] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1063.432741][ T7209] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1063.437543][ T7207] EXT4-fs (loop2): mount failed [ 1063.529077][ T7207] loop2: detected capacity change from 0 to 512 [ 1063.565216][ T7207] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1063.575521][ T7207] EXT4-fs (loop2): mount failed 18:41:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0110ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, @private0, @mcast2}}) 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1063.739546][ T7230] loop2: detected capacity change from 0 to 512 18:41:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @private0, @mcast2}}) [ 1063.793976][ T7230] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1063.803273][ T7230] EXT4-fs (loop2): mount failed 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1063.883533][ T7230] loop2: detected capacity change from 0 to 512 [ 1063.900816][ T7237] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1063.956481][ T7230] EXT4-fs: failed to create workqueue [ 1063.963349][ T7230] EXT4-fs (loop2): mount failed 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:58 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff52ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:58 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @private0, @mcast2}}) [ 1064.134700][ T7253] loop2: detected capacity change from 0 to 512 18:41:58 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.172013][ T7253] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:41:58 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @private0, @mcast2}}) 18:41:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff54ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1064.316830][ T7260] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:41:59 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.343754][ T7269] loop2: detected capacity change from 0 to 512 18:41:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.372074][ T7269] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:41:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff5def010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.505209][ T7273] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1064.557577][ T7281] loop2: detected capacity change from 0 to 512 18:41:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @private0, @mcast2}}) 18:41:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x500, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.587367][ T7281] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef020001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x600, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.746687][ T7293] loop2: detected capacity change from 0 to 512 18:41:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @private0, @mcast2}}) 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1064.813284][ T7293] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1064.821437][ T7293] EXT4-fs (loop2): mount failed 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x700, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef030001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:41:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @private0, @mcast2}}) [ 1065.031207][ T7312] loop2: detected capacity change from 0 to 512 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.088376][ T7312] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:41:59 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x900, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.096878][ T7312] EXT4-fs (loop2): mount failed 18:41:59 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @private0, @mcast2}}) 18:41:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.187233][ T7312] loop2: detected capacity change from 0 to 512 [ 1065.240603][ T7312] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1065.249647][ T7312] EXT4-fs (loop2): mount failed 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef040001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @private0, @mcast2}}) 18:42:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd73, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.453969][ T7335] loop2: detected capacity change from 0 to 512 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.508221][ T7335] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1065.517805][ T7335] EXT4-fs (loop2): mount failed 18:42:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x37030000, 0x0, @private0, @mcast2}}) 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3f00, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef050001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1065.696991][ T7356] loop2: detected capacity change from 0 to 512 [ 1065.742040][ T7356] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1065.751599][ T7356] EXT4-fs (loop2): mount failed 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef070001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, @private0, @mcast2}}) 18:42:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x730d, 0x0, "0000000300000007db82456fa79c812600"}) [ 1065.896183][ T7367] loop2: detected capacity change from 0 to 512 [ 1065.918764][ T7367] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1065.926106][ T7363] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1065.929291][ T7367] EXT4-fs (loop2): mount failed 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff00, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef080001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xfeff0000, 0x0, @private0, @mcast2}}) 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1066.058096][ T7383] loop2: detected capacity change from 0 to 512 [ 1066.112688][ T7383] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1066.120334][ T7383] EXT4-fs (loop2): mount failed 18:42:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:00 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, @private0, @mcast2}}) 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0a0001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1066.281919][ T7398] loop2: detected capacity change from 0 to 512 18:42:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1066.302853][ T7398] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1066.312859][ T7398] EXT4-fs (loop2): mount failed 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) [ 1066.419068][ T7402] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0b0001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1066.500839][ T7413] loop2: detected capacity change from 0 to 512 18:42:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3000000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1066.556188][ T7413] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1066.574421][ T7413] EXT4-fs (loop2): mount failed 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1066.644289][ T7417] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @private0, @mcast2}}) 18:42:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0c0001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1066.745941][ T7426] loop2: detected capacity change from 0 to 512 18:42:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) [ 1066.807622][ T7426] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1066.816975][ T7426] EXT4-fs (loop2): mount failed 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 18:42:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @private0, @mcast2}}) 18:42:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5000000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1066.914274][ T7426] loop2: detected capacity change from 0 to 512 [ 1066.957434][ T7426] EXT4-fs: failed to create workqueue [ 1066.965581][ T7426] EXT4-fs (loop2): mount failed 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 18:42:01 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef100001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:01 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @private0, @mcast2}}) 18:42:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1067.249674][ T7459] loop2: detected capacity change from 0 to 512 18:42:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7000000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1067.303637][ T7459] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1067.312641][ T7459] EXT4-fs (loop2): mount failed 18:42:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @private0, @mcast2}}) 18:42:02 executing program 3: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, "0000000300000007db82456fa79c812600"}) [ 1067.483258][ T7459] loop2: detected capacity change from 0 to 512 [ 1067.511184][ T7459] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1067.521115][ T7459] EXT4-fs (loop2): mount failed 18:42:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef140001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 1) 18:42:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @private0, @mcast2}}) [ 1067.667038][ T7481] FAULT_INJECTION: forcing a failure. [ 1067.667038][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.683664][ T7481] CPU: 2 PID: 7481 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1067.696030][ T7481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1067.712235][ T7481] Call Trace: [ 1067.718637][ T7481] [ 1067.722907][ T7481] dump_stack_lvl+0xcd/0x134 [ 1067.728603][ T7481] should_fail.cold+0x5/0xa [ 1067.734280][ T7481] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1067.740956][ T7481] should_failslab+0x5/0x10 [ 1067.746067][ T7481] __kmalloc+0x72/0x340 [ 1067.751851][ T7481] tomoyo_realpath_from_path+0xc3/0x620 [ 1067.759422][ T7481] ? tomoyo_profile+0x42/0x50 [ 1067.765446][ T7481] tomoyo_path_number_perm+0x1d5/0x590 [ 1067.772652][ T7481] ? tomoyo_path_number_perm+0x18d/0x590 [ 1067.779931][ T7481] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1067.788208][ T7481] ? check_path.constprop.0+0x50/0x50 [ 1067.794976][ T7481] ? lock_downgrade+0x6e0/0x6e0 [ 1067.802542][ T7481] ? find_held_lock+0x2d/0x110 [ 1067.808642][ T7481] ? __fget_files+0x23d/0x3e0 [ 1067.814462][ T7481] security_file_ioctl+0x50/0xb0 [ 1067.820360][ T7481] __do_compat_sys_ioctl+0x4e/0x290 [ 1067.826729][ T7481] __do_fast_syscall_32+0x65/0xf0 [ 1067.833067][ T7481] do_fast_syscall_32+0x2f/0x70 [ 1067.839246][ T7481] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1067.846906][ T7481] RIP: 0023:0xf6f5f549 18:42:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @private0, @mcast2}}) [ 1067.851528][ T7481] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.889863][ T7481] RSP: 002b:00000000f45595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1067.901122][ T7481] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 1067.911784][ T7481] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1067.921907][ T7481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1067.931613][ T7481] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1067.942565][ T7481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.953981][ T7481] [ 1067.958493][ T7481] ERROR: Out of memory at tomoyo_realpath_from_path. 18:42:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 2) [ 1068.008139][ T7495] loop2: detected capacity change from 0 to 512 18:42:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3f000000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1068.030771][ T7495] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1068.041029][ T7495] EXT4-fs (loop2): mount failed [ 1068.071176][ T7498] FAULT_INJECTION: forcing a failure. [ 1068.071176][ T7498] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.088580][ T7498] CPU: 2 PID: 7498 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1068.099845][ T7498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1068.112205][ T7498] Call Trace: [ 1068.116927][ T7498] [ 1068.121073][ T7498] dump_stack_lvl+0xcd/0x134 [ 1068.127104][ T7498] should_fail.cold+0x5/0xa 18:42:02 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef370001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1068.133534][ T7498] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1068.140599][ T7498] should_failslab+0x5/0x10 18:42:02 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @private0, @mcast2}}) [ 1068.147192][ T7498] __kmalloc+0x72/0x340 [ 1068.152578][ T7498] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1068.158973][ T7498] tomoyo_encode+0x28/0x50 18:42:02 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x730d0000, 0x0, "0000000300000007db82456fa79c812600"}) [ 1068.166102][ T7498] tomoyo_realpath_from_path+0x186/0x620 [ 1068.175452][ T7498] ? tomoyo_profile+0x42/0x50 [ 1068.181664][ T7498] tomoyo_path_number_perm+0x1d5/0x590 [ 1068.192052][ T7498] ? tomoyo_path_number_perm+0x18d/0x590 [ 1068.200861][ T7498] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1068.211797][ T7498] ? check_path.constprop.0+0x50/0x50 [ 1068.220031][ T7498] ? lock_downgrade+0x6e0/0x6e0 [ 1068.228647][ T7498] ? find_held_lock+0x2d/0x110 [ 1068.235697][ T7498] ? __fget_files+0x23d/0x3e0 [ 1068.242405][ T7498] security_file_ioctl+0x50/0xb0 [ 1068.249945][ T7498] __do_compat_sys_ioctl+0x4e/0x290 [ 1068.256611][ T7498] __do_fast_syscall_32+0x65/0xf0 [ 1068.263619][ T7498] do_fast_syscall_32+0x2f/0x70 [ 1068.270716][ T7498] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.279465][ T7498] RIP: 0023:0xf6f5f549 [ 1068.284392][ T7498] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1068.310606][ T7498] RSP: 002b:00000000f45595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1068.322288][ T7498] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 1068.333558][ T7498] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1068.343982][ T7498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 18:42:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @private0, @mcast2}}) [ 1068.355762][ T7498] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1068.366674][ T7498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.377531][ T7498] [ 1068.382054][ T7498] ERROR: Out of memory at tomoyo_realpath_from_path. 18:42:03 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80ffffff, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 3) [ 1068.469722][ T7518] FAULT_INJECTION: forcing a failure. [ 1068.469722][ T7518] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.470695][ T7518] [ 1068.470712][ T7518] ====================================================== [ 1068.470729][ T7518] WARNING: possible circular locking dependency detected [ 1068.470743][ T7518] 5.15.0-syzkaller #0 Not tainted 18:42:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x337, @private0, @mcast2}}) [ 1068.470756][ T7518] ------------------------------------------------------ [ 1068.470764][ T7518] syz-executor.3/7518 is trying to acquire lock: [ 1068.470775][ T7518] ffffffff8b892b00 (console_owner){-.-.}-{0:0}, at: console_unlock+0x303/0xb70 [ 1068.470848][ T7518] [ 1068.470848][ T7518] but task is already holding lock: [ 1068.470854][ T7518] ffff8880241f8958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 1068.470906][ T7518] [ 1068.470906][ T7518] which lock already depends on the new lock. [ 1068.470906][ T7518] [ 1068.470913][ T7518] [ 1068.470913][ T7518] the existing dependency chain (in reverse order) is: [ 1068.470919][ T7518] [ 1068.470919][ T7518] -> #2 (&port->lock){-.-.}-{2:2}: [ 1068.470955][ T7518] _raw_spin_lock_irqsave+0x39/0x50 [ 1068.470988][ T7518] tty_port_tty_get+0x1f/0x100 [ 1068.471011][ T7518] tty_port_default_wakeup+0x11/0x40 [ 1068.471032][ T7518] serial8250_tx_chars+0x4f3/0xad0 [ 1068.471075][ T7518] serial8250_handle_irq.part.0+0x328/0x3d0 [ 1068.471100][ T7518] serial8250_default_handle_irq+0xb2/0x220 [ 1068.471124][ T7518] serial8250_interrupt+0xfd/0x200 [ 1068.471146][ T7518] __handle_irq_event_percpu+0x303/0x8f0 18:42:03 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @private0, @mcast2}}) [ 1068.471170][ T7518] handle_irq_event+0x102/0x280 [ 1068.471192][ T7518] handle_edge_irq+0x25f/0xd00 [ 1068.471211][ T7518] __common_interrupt+0x9d/0x210 [ 1068.471296][ T7518] common_interrupt+0xa4/0xc0 [ 1068.471321][ T7518] asm_common_interrupt+0x1e/0x40 [ 1068.471348][ T7518] default_idle+0xb/0x10 [ 1068.471371][ T7518] default_idle_call+0x87/0xd0 [ 1068.471392][ T7518] do_idle+0x401/0x590 [ 1068.471428][ T7518] cpu_startup_entry+0x14/0x20 [ 1068.471450][ T7518] start_secondary+0x265/0x340 [ 1068.471491][ T7518] secondary_startup_64_no_verify+0xb0/0xbb [ 1068.471544][ T7518] [ 1068.471544][ T7518] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1068.471583][ T7518] _raw_spin_lock_irqsave+0x39/0x50 [ 1068.471610][ T7518] serial8250_console_write+0x91a/0xb70 [ 1068.471636][ T7518] console_unlock+0x7a9/0xb70 [ 1068.471657][ T7518] vprintk_emit+0x198/0x4f0 [ 1068.471676][ T7518] vprintk+0x80/0x90 [ 1068.471696][ T7518] _printk+0xba/0xed [ 1068.471742][ T7518] register_console+0x55f/0x780 [ 1068.471764][ T7518] univ8250_console_init+0x3a/0x46 [ 1068.472024][ T7518] console_init+0x3c1/0x58d [ 1068.472097][ T7518] start_kernel+0x30b/0x49b [ 1068.472133][ T7518] secondary_startup_64_no_verify+0xb0/0xbb [ 1068.472162][ T7518] [ 1068.472162][ T7518] -> #0 (console_owner){-.-.}-{0:0}: [ 1068.472201][ T7518] __lock_acquire+0x2a07/0x54a0 [ 1068.472226][ T7518] lock_acquire+0x1ab/0x510 [ 1068.472251][ T7518] console_unlock+0x356/0xb70 [ 1068.472277][ T7518] vprintk_emit+0x198/0x4f0 [ 1068.472301][ T7518] vprintk+0x80/0x90 [ 1068.472324][ T7518] _printk+0xba/0xed [ 1068.472342][ T7518] should_fail+0x472/0x5a0 [ 1068.472409][ T7518] should_failslab+0x5/0x10 [ 1068.472435][ T7518] __kmalloc+0x72/0x340 [ 1068.472459][ T7518] tty_buffer_alloc+0x23f/0x2a0 [ 1068.472483][ T7518] __tty_buffer_request_room+0x156/0x2a0 [ 1068.472507][ T7518] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1068.472534][ T7518] pty_write+0x11c/0x1e0 [ 1068.472556][ T7518] do_output_char+0x5de/0x850 [ 1068.472576][ T7518] __process_echoes+0x38e/0x9f0 [ 1068.472596][ T7518] n_tty_receive_buf_common+0x1699/0x4780 [ 1068.472619][ T7518] tty_ioctl+0x909/0x1670 [ 1068.472643][ T7518] tty_compat_ioctl+0x295/0x410 [ 1068.472669][ T7518] __do_compat_sys_ioctl+0x1c7/0x290 [ 1068.472696][ T7518] __do_fast_syscall_32+0x65/0xf0 [ 1068.472720][ T7518] do_fast_syscall_32+0x2f/0x70 [ 1068.472741][ T7518] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.472765][ T7518] [ 1068.472765][ T7518] other info that might help us debug this: [ 1068.472765][ T7518] [ 1068.472771][ T7518] Chain exists of: [ 1068.472771][ T7518] console_owner --> &port_lock_key --> &port->lock [ 1068.472771][ T7518] [ 1068.472802][ T7518] Possible unsafe locking scenario: [ 1068.472802][ T7518] [ 1068.472807][ T7518] CPU0 CPU1 [ 1068.472812][ T7518] ---- ---- [ 1068.472817][ T7518] lock(&port->lock); [ 1068.472829][ T7518] lock(&port_lock_key); [ 1068.472855][ T7518] lock(&port->lock); [ 1068.472869][ T7518] lock(console_owner); [ 1068.472882][ T7518] [ 1068.472882][ T7518] *** DEADLOCK *** [ 1068.472882][ T7518] [ 1068.472886][ T7518] 6 locks held by syz-executor.3/7518: [ 1068.472900][ T7518] #0: ffff8880245aa098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 1068.472956][ T7518] #1: ffff8880241fe0b8 (&port->buf.lock/1){+.+.}-{3:3}, at: tty_ioctl+0x89f/0x1670 [ 1068.473017][ T7518] #2: ffff8880245aa2e8 (&o_tty->termios_rwsem/1){++++}-{3:3}, at: n_tty_receive_buf_common+0x84/0x4780 [ 1068.473079][ T7518] #3: ffffc90021565378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_receive_buf_common+0x1663/0x4780 [ 1068.473135][ T7518] #4: ffff8880241f8958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0 [ 1068.473188][ T7518] #5: ffffffff8b972f40 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90 [ 1068.473242][ T7518] [ 1068.473242][ T7518] stack backtrace: [ 1068.473248][ T7518] CPU: 2 PID: 7518 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1068.473272][ T7518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1068.473286][ T7518] Call Trace: [ 1068.473293][ T7518] [ 1068.473303][ T7518] dump_stack_lvl+0xcd/0x134 [ 1068.473333][ T7518] check_noncircular+0x25f/0x2e0 [ 1068.473370][ T7518] ? filter_irq_stacks+0x90/0x90 [ 1068.473422][ T7518] ? print_circular_bug+0x1e0/0x1e0 [ 1068.473497][ T7518] ? memcpy+0x39/0x60 [ 1068.473528][ T7518] ? lockdep_lock+0xc6/0x200 [ 1068.473550][ T7518] ? call_rcu_zapped+0xb0/0xb0 [ 1068.473576][ T7518] __lock_acquire+0x2a07/0x54a0 [ 1068.473605][ T7518] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1068.473633][ T7518] ? check_path.constprop.0+0x50/0x50 [ 1068.473663][ T7518] lock_acquire+0x1ab/0x510 [ 1068.473688][ T7518] ? console_unlock+0x303/0xb70 [ 1068.473714][ T7518] ? lock_release+0x720/0x720 [ 1068.473735][ T7518] ? lock_downgrade+0x6e0/0x6e0 [ 1068.473759][ T7518] ? do_raw_spin_lock+0x120/0x2b0 [ 1068.473787][ T7518] ? rwlock_bug.part.0+0x90/0x90 [ 1068.473817][ T7518] console_unlock+0x356/0xb70 [ 1068.473843][ T7518] ? console_unlock+0x303/0xb70 [ 1068.473872][ T7518] ? devkmsg_read+0x730/0x730 [ 1068.473896][ T7518] ? lock_release+0x720/0x720 [ 1068.473925][ T7518] ? vprintk+0x80/0x90 [ 1068.473951][ T7518] vprintk_emit+0x198/0x4f0 [ 1068.473977][ T7518] vprintk+0x80/0x90 [ 1068.474002][ T7518] _printk+0xba/0xed [ 1068.474023][ T7518] ? record_print_text.cold+0x16/0x16 [ 1068.474050][ T7518] ? ___ratelimit+0x222/0x4b0 [ 1068.474105][ T7518] should_fail+0x472/0x5a0 [ 1068.474135][ T7518] ? tty_buffer_alloc+0x23f/0x2a0 [ 1068.474161][ T7518] should_failslab+0x5/0x10 [ 1068.474190][ T7518] __kmalloc+0x72/0x340 [ 1068.474219][ T7518] tty_buffer_alloc+0x23f/0x2a0 [ 1068.474246][ T7518] __tty_buffer_request_room+0x156/0x2a0 [ 1068.474277][ T7518] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1068.474311][ T7518] pty_write+0x11c/0x1e0 [ 1068.474341][ T7518] do_output_char+0x5de/0x850 [ 1068.474362][ T7518] ? pty_stop+0x160/0x160 [ 1068.474390][ T7518] __process_echoes+0x38e/0x9f0 [ 1068.474421][ T7518] ? kill_fasync+0x1c/0x470 [ 1068.474451][ T7518] n_tty_receive_buf_common+0x1699/0x4780 [ 1068.474490][ T7518] ? n_tty_receive_buf2+0x40/0x40 [ 1068.474516][ T7518] tty_ioctl+0x909/0x1670 [ 1068.474545][ T7518] ? tty_lookup_driver+0x550/0x550 [ 1068.474581][ T7518] ? lock_downgrade+0x6e0/0x6e0 [ 1068.474606][ T7518] ? find_held_lock+0x2d/0x110 [ 1068.474636][ T7518] ? __fget_files+0x23d/0x3e0 [ 1068.474663][ T7518] ? tty_ioctl+0x1670/0x1670 [ 1068.474691][ T7518] tty_compat_ioctl+0x295/0x410 [ 1068.474719][ T7518] ? tty_ioctl+0x1670/0x1670 [ 1068.474743][ T7518] __do_compat_sys_ioctl+0x1c7/0x290 [ 1068.474818][ T7518] __do_fast_syscall_32+0x65/0xf0 [ 1068.474846][ T7518] do_fast_syscall_32+0x2f/0x70 [ 1068.474870][ T7518] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1068.474899][ T7518] RIP: 0023:0xf6f5f549 [ 1068.474919][ T7518] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1068.474941][ T7518] RSP: 002b:00000000f45595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1068.474963][ T7518] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 1068.474979][ T7518] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1068.474995][ T7518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1068.475009][ T7518] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1068.475023][ T7518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1068.475046][ T7518] [ 1068.476989][ T7520] loop2: detected capacity change from 0 to 512 [ 1068.493274][ T7518] CPU: 2 PID: 7518 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1068.493323][ T7518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1068.493337][ T7518] Call Trace: [ 1068.493370][ T7518] [ 1068.493382][ T7518] dump_stack_lvl+0xcd/0x134 [ 1068.493423][ T7518] should_fail.cold+0x5/0xa [ 1069.804166][ T7518] ? tty_buffer_alloc+0x23f/0x2a0 [ 1069.810480][ T7518] should_failslab+0x5/0x10 [ 1069.816388][ T7518] __kmalloc+0x72/0x340 [ 1069.823660][ T7518] tty_buffer_alloc+0x23f/0x2a0 [ 1069.830329][ T7518] __tty_buffer_request_room+0x156/0x2a0 [ 1069.839132][ T7518] tty_insert_flip_string_fixed_flag+0x93/0x250 [ 1069.847378][ T7518] pty_write+0x11c/0x1e0 [ 1069.852443][ T7518] do_output_char+0x5de/0x850 [ 1069.858670][ T7518] ? pty_stop+0x160/0x160 [ 1069.864749][ T7518] __process_echoes+0x38e/0x9f0 [ 1069.870947][ T7518] ? kill_fasync+0x1c/0x470 [ 1069.876232][ T7518] n_tty_receive_buf_common+0x1699/0x4780 [ 1069.883838][ T7518] ? n_tty_receive_buf2+0x40/0x40 [ 1069.890787][ T7518] tty_ioctl+0x909/0x1670 [ 1069.898319][ T7518] ? tty_lookup_driver+0x550/0x550 [ 1069.906483][ T7518] ? lock_downgrade+0x6e0/0x6e0 [ 1069.913163][ T7518] ? find_held_lock+0x2d/0x110 [ 1069.920337][ T7518] ? __fget_files+0x23d/0x3e0 [ 1069.927287][ T7518] ? tty_ioctl+0x1670/0x1670 [ 1069.934729][ T7518] tty_compat_ioctl+0x295/0x410 [ 1069.942347][ T7518] ? tty_ioctl+0x1670/0x1670 [ 1069.949622][ T7518] __do_compat_sys_ioctl+0x1c7/0x290 [ 1069.956871][ T7518] __do_fast_syscall_32+0x65/0xf0 [ 1069.963776][ T7518] do_fast_syscall_32+0x2f/0x70 [ 1069.969689][ T7518] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1069.977350][ T7518] RIP: 0023:0xf6f5f549 [ 1069.983524][ T7518] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1070.010960][ T7518] RSP: 002b:00000000f45595fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1070.024144][ T7518] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005412 [ 1070.035815][ T7518] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1070.046435][ T7518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1070.059681][ T7518] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1070.071746][ T7518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1070.085327][ T7518] [ 1070.098009][ T7520] EXT4-fs: failed to create workqueue [ 1070.106510][ T7520] EXT4-fs (loop2): mount failed 18:42:04 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef005201000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:04 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @private0, @mcast2}}) 18:42:04 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81ffffff, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) (fail_nth: 4) [ 1070.190068][ T7538] FAULT_INJECTION: forcing a failure. 18:42:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x82ffffff, 0x0, "0000000300000007db82456fa79c812600"}) [ 1070.190068][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.199117][ T7541] loop2: detected capacity change from 0 to 512 [ 1070.209389][ T7538] CPU: 2 PID: 7538 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 1070.230284][ T7538] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1070.243299][ T7538] Call Trace: [ 1070.248973][ T7538] [ 1070.253579][ T7538] dump_stack_lvl+0xcd/0x134 [ 1070.259806][ T7538] should_fail.cold+0x5/0xa [ 1070.266679][ T7538] _copy_to_user+0x2c/0x150 [ 1070.272784][ T7538] simple_read_from_buffer+0xcc/0x160 [ 1070.280627][ T7538] proc_fail_nth_read+0x187/0x220 [ 1070.289456][ T7538] ? proc_sessionid_read+0x220/0x220 [ 1070.299372][ T7538] ? security_file_permission+0xab/0xd0 [ 1070.318510][ T7538] ? proc_sessionid_read+0x220/0x220 [ 1070.325465][ T7538] vfs_read+0x1b5/0x600 [ 1070.330618][ T7538] ksys_read+0x12d/0x250 [ 1070.337332][ T7538] ? vfs_write+0xae0/0xae0 [ 1070.344681][ T7538] __do_fast_syscall_32+0x65/0xf0 [ 1070.351306][ T7538] do_fast_syscall_32+0x2f/0x70 [ 1070.358220][ T7538] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1070.366732][ T7538] RIP: 0023:0xf6f5f549 [ 1070.373640][ T7538] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1070.402152][ T7538] RSP: 002b:00000000f4559600 EFLAGS: 00000282 ORIG_RAX: 0000000000000003 [ 1070.414197][ T7538] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f4559690 [ 1070.425963][ T7538] RDX: 000000000000000f RSI: 00000000f7095000 RDI: 0000000000000000 [ 1070.435449][ T7538] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1070.445399][ T7538] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1070.455850][ T7538] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1070.466927][ T7538] [ 1070.476543][ T7541] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1070.500764][ T7541] EXT4-fs (loop2): mount failed 18:42:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @private0, @mcast2}}) 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "0000000300000007db82456fa79c812600"}) [ 1070.586142][ T7541] loop2: detected capacity change from 0 to 512 [ 1070.683863][ T7541] EXT4-fs: failed to create workqueue [ 1070.695604][ T7541] EXT4-fs (loop2): mount failed 18:42:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef00ff01000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x2, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3703, @private0, @mcast2}}) 18:42:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xff000000, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x10, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1070.833366][ T7562] loop2: detected capacity change from 0 to 512 [ 1070.866201][ T7562] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1070.874663][ T7562] EXT4-fs (loop2): mount failed 18:42:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c00, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, @private0, @mcast2}}) [ 1070.986002][ T7562] loop2: detected capacity change from 0 to 512 [ 1071.007462][ T7562] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1071.018335][ T7562] EXT4-fs (loop2): mount failed 18:42:05 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010400000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:05 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff80, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4c01, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:05 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, @private0, @mcast2}}) [ 1071.125942][ T7589] loop2: detected capacity change from 0 to 512 18:42:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5401, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1071.199082][ T7589] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:42:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, @private0, @mcast2}}) [ 1071.209156][ T7589] EXT4-fs (loop2): mount failed 18:42:06 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff81, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:06 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef015200000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5408, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, @private0, @mcast2}}) [ 1071.338283][ T7614] loop2: detected capacity change from 0 to 512 18:42:06 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffff82, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5409, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1071.393322][ T7614] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1071.401498][ T7614] EXT4-fs (loop2): mount failed 18:42:06 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @private0, @mcast2}}) 18:42:06 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540a, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1071.483909][ T7626] warn_alloc: 10 callbacks suppressed [ 1071.483930][ T7626] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1071.484753][ T7614] loop2: detected capacity change from 0 to 512 [ 1071.506269][ T7626] ,cpuset=syz0,mems_allowed=0-1 [ 1071.547819][ T7626] CPU: 2 PID: 7626 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1071.561084][ T7626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1071.574001][ T7626] Call Trace: [ 1071.578648][ T7626] [ 1071.582655][ T7626] dump_stack_lvl+0xcd/0x134 [ 1071.588967][ T7626] warn_alloc.cold+0x87/0x17a [ 1071.595323][ T7626] ? zone_watermark_ok_safe+0x290/0x290 [ 1071.603068][ T7626] ? __kmalloc_node+0x62/0x390 [ 1071.609080][ T7626] ? lock_downgrade+0x6e0/0x6e0 [ 1071.615464][ T7626] ? rwlock_bug.part.0+0x90/0x90 [ 1071.622509][ T7626] ? io_schedule_timeout+0x180/0x180 [ 1071.630029][ T7626] ? alloc_pages_bulk_array_mempolicy+0x1ca/0x4d0 [ 1071.639434][ T7626] ? __vmalloc_node_range+0x574/0xab0 [ 1071.646674][ T7626] __vmalloc_node_range+0x883/0xab0 [ 1071.653896][ T7626] ? vfree_atomic+0xe0/0xe0 [ 1071.659766][ T7626] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 1071.666841][ T7626] ? __ldsem_down_read_nested+0x850/0x850 [ 1071.674380][ T7626] ? __wake_up_common+0x650/0x650 [ 1071.680498][ T7626] ? n_tty_open+0x16/0x170 [ 1071.685836][ T7626] vzalloc+0x67/0x80 [ 1071.690704][ T7626] ? n_tty_open+0x16/0x170 [ 1071.696240][ T7626] n_tty_open+0x16/0x170 [ 1071.702067][ T7626] ? n_tty_set_termios+0x1010/0x1010 [ 1071.709078][ T7626] tty_ldisc_open+0x9b/0x110 [ 1071.716260][ T7626] tty_ldisc_setup+0x43/0x100 [ 1071.723197][ T7626] tty_init_dev.part.0+0x1f4/0x610 [ 1071.729413][ T7626] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1071.736691][ T7626] tty_init_dev+0x5b/0x80 [ 1071.741826][ T7626] ptmx_open+0x112/0x360 [ 1071.746827][ T7626] ? pty_unix98_compat_ioctl+0x50/0x50 [ 1071.753329][ T7626] chrdev_open+0x266/0x770 [ 1071.758719][ T7626] ? cdev_device_add+0x210/0x210 [ 1071.767164][ T7626] ? fsnotify_perm.part.0+0x22d/0x620 [ 1071.779031][ T7626] do_dentry_open+0x4c8/0x1250 [ 1071.784601][ T7626] ? cdev_device_add+0x210/0x210 [ 1071.790893][ T7626] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1071.799420][ T7626] ? may_open+0x1f6/0x420 [ 1071.805488][ T7626] path_openat+0x1cad/0x2750 [ 1071.811463][ T7626] ? path_lookupat+0x860/0x860 [ 1071.817667][ T7626] ? perf_trace_lock+0xeb/0x4d0 [ 1071.824986][ T7626] ? check_path.constprop.0+0x50/0x50 [ 1071.833059][ T7626] do_filp_open+0x1aa/0x400 [ 1071.838522][ T7626] ? may_open_dev+0xf0/0xf0 [ 1071.844439][ T7626] ? rwlock_bug.part.0+0x90/0x90 [ 1071.851579][ T7626] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1071.861628][ T7626] ? _find_next_bit+0x1e3/0x260 [ 1071.867637][ T7626] ? _raw_spin_unlock+0x24/0x40 [ 1071.874985][ T7626] ? alloc_fd+0x2f0/0x670 [ 1071.880490][ T7626] do_sys_openat2+0x16d/0x4d0 [ 1071.886969][ T7626] ? __schedule+0xaa2/0x4940 [ 1071.893629][ T7626] ? build_open_flags+0x6f0/0x6f0 [ 1071.900459][ T7626] ? rcu_read_lock_sched_held+0xd/0x70 [ 1071.908792][ T7626] ? lock_release+0x522/0x720 [ 1071.916189][ T7626] ? __context_tracking_exit+0xb8/0xe0 [ 1071.923837][ T7626] __ia32_compat_sys_openat+0x13f/0x1f0 [ 1071.930904][ T7626] ? __x64_compat_sys_open+0x1c0/0x1c0 [ 1071.938146][ T7626] ? get_vtime_delta+0x26e/0x420 [ 1071.944978][ T7626] __do_fast_syscall_32+0x65/0xf0 [ 1071.951688][ T7626] do_fast_syscall_32+0x2f/0x70 [ 1071.958653][ T7626] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1071.967861][ T7626] RIP: 0023:0xf6e9d549 [ 1071.974367][ T7626] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1072.003674][ T7626] RSP: 002b:00000000f44975fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127 [ 1072.017830][ T7626] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000180 [ 1072.030503][ T7626] RDX: 00000000d6081b8a RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.042573][ T7626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1072.052651][ T7626] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1072.067112][ T7626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1072.076779][ T7626] [ 1072.102616][ T7626] Mem-Info: [ 1072.106586][ T7626] active_anon:5156 inactive_anon:103403 isolated_anon:0 [ 1072.106586][ T7626] active_file:7145 inactive_file:42534 isolated_file:30 [ 1072.106586][ T7626] unevictable:768 dirty:15 writeback:22 [ 1072.106586][ T7626] slab_reclaimable:14847 slab_unreclaimable:48273 [ 1072.106586][ T7626] mapped:38984 shmem:1791 pagetables:1320 bounce:0 [ 1072.106586][ T7626] kernel_misc_reclaimable:0 [ 1072.106586][ T7626] free:33084 free_pcp:623 free_cma:0 [ 1072.125450][ T7614] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1072.163661][ T7626] Node 0 active_anon:20216kB inactive_anon:144100kB active_file:4880kB inactive_file:3628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:6284kB dirty:0kB writeback:0kB shmem:4268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB kernel_stack:9156kB pagetables:2224kB all_unreclaimable? no [ 1072.163728][ T7626] Node 1 active_anon:408kB inactive_anon:269512kB active_file:23700kB inactive_file:166508kB unevictable:1436kB isolated(anon):0kB isolated(file):120kB mapped:149652kB dirty:60kB writeback:88kB shmem:2896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 100352kB writeback_tmp:0kB kernel_stack:2320kB pagetables:3056kB all_unreclaimable? no [ 1072.163787][ T7626] Node 0 DMA free:3404kB boost:2048kB min:2768kB low:2948kB high:3128kB reserved_highatomic:0KB active_anon:404kB inactive_anon:7404kB active_file:144kB inactive_file:152kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1072.163855][ T7626] lowmem_reserve[]: [ 1072.187193][ T7614] EXT4-fs (loop2): mount failed [ 1072.225438][ T7626] 0 455 455 455 455 [ 1072.225470][ T7626] Node 0 DMA32 free:33552kB boost:0kB min:21928kB low:27408kB high:32888kB reserved_highatomic:0KB active_anon:19812kB inactive_anon:136696kB active_file:4736kB inactive_file:3476kB unevictable:1536kB writepending:0kB present:1032192kB managed:473844kB mlocked:0kB bounce:0kB free_pcp:1204kB local_pcp:776kB free_cma:0kB 18:42:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010201000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @private0, @mcast2}}) [ 1072.225514][ T7626] lowmem_reserve[]: 0 0 0 0 0 [ 1072.366834][ T7626] Node 1 DMA32 free:86664kB boost:0kB min:44928kB low:56160kB high:67392kB reserved_highatomic:0KB active_anon:404kB inactive_anon:269196kB active_file:23672kB inactive_file:166628kB unevictable:1536kB writepending:68kB present:1048436kB managed:954820kB mlocked:0kB bounce:0kB free_pcp:10076kB local_pcp:1256kB free_cma:0kB [ 1072.408750][ T7626] lowmem_reserve[]: 0 0 0 0 0 [ 1072.415941][ T7626] Node 0 DMA: 75*4kB (UME) 28*8kB (UM) 15*16kB (UME) 12*32kB (UM) 6*64kB (UE) 3*128kB (UE) 2*256kB (UE) 2*512kB (E) 0*1024kB 0*2048kB 0*4096kB = 3452kB [ 1072.436830][ T7626] Node 0 DMA32: 558*4kB (UME) 473*8kB (UME) 137*16kB (UME) 213*32kB (UME) 93*64kB (UME) 27*128kB (UE) 6*256kB (UE) 3*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 29552kB 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @private0, @mcast2}}) [ 1072.459345][ T7626] Node 1 DMA32: 3457*4kB (UME) 1514*8kB (UME) 547*16kB (UME) 369*32kB (UME) 105*64kB (UME) 32*128kB (UME) 20*256kB (M) 11*512kB (UM) 7*1024kB (ME) 3*2048kB (M) 0*4096kB = 81380kB [ 1072.483761][ T7626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.495718][ T7626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.508615][ T7626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1072.522628][ T7626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1072.535654][ T7626] 12247 total pagecache pages [ 1072.542472][ T7626] 0 pages in swap cache [ 1072.548090][ T7626] Swap cache stats: add 0, delete 0, find 0/0 [ 1072.556682][ T7626] Free swap = 0kB 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @private0, @mcast2}}) [ 1072.562490][ T7626] Total swap = 0kB [ 1072.567456][ T7626] 524155 pages RAM [ 1072.571934][ T7626] 0 pages HighMem/MovableOnly [ 1072.577687][ T7626] 163149 pages reserved [ 1072.583546][ T7626] 0 pages cma reserved [ 1072.597582][ T7626] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1072.608175][ T7633] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1072.618483][ T7634] ptm ptm2: ldisc open failed (-12), clearing slot 2 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540b, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, "0000000300000007db82456fa79c812600"}) [ 1072.670501][ T7653] loop2: detected capacity change from 0 to 512 [ 1072.727746][ T7653] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1072.735867][ T7653] EXT4-fs (loop2): mount failed 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540c, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @private0, @mcast2}}) 18:42:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010301000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540d, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1072.876742][ T7677] loop2: detected capacity change from 0 to 512 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540e, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1072.913258][ T7677] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1072.922504][ T7677] EXT4-fs (loop2): mount failed 18:42:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @private0, @mcast2}}) 18:42:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x540f, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010401000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1073.103936][ T7691] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5413, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:07 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, "0000000300000007db82456fa79c812600"}) [ 1073.146282][ T7699] loop2: detected capacity change from 0 to 512 18:42:07 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @private0, @mcast2}}) [ 1073.186428][ T7699] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1073.196250][ T7699] EXT4-fs (loop2): mount failed 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5414, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010501000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5415, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @private0, @mcast2}}) [ 1073.313483][ T7716] loop2: detected capacity change from 0 to 512 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5416, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1073.351281][ T7716] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, "0000000300000007db82456fa79c812600"}) [ 1073.360558][ T7716] EXT4-fs (loop2): mount failed 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5418, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1073.427084][ T7716] loop2: detected capacity change from 0 to 512 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x37030000, @private0, @mcast2}}) [ 1073.472074][ T7716] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1073.480556][ T7716] EXT4-fs (loop2): mount failed 18:42:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010601000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541a, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, @private0, @mcast2}}) [ 1073.567146][ T7744] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1073.572161][ T7752] loop2: detected capacity change from 0 to 512 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000100000007db82456fa79c812600"}) [ 1073.616839][ T7752] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1073.633715][ T7752] EXT4-fs (loop2): mount failed 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff0000, @private0, @mcast2}}) 18:42:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010701000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541d, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000200000007db82456fa79c812600"}) [ 1073.763321][ T7771] loop2: detected capacity change from 0 to 512 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, @private0, @mcast2}}) [ 1073.818927][ T7771] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1073.828990][ T7771] EXT4-fs (loop2): mount failed 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0200000300000007db82456fa79c812600"}) [ 1073.905637][ T7771] loop2: detected capacity change from 0 to 512 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541e, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1073.968481][ T7783] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1073.986207][ T7771] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1073.996194][ T7771] EXT4-fs (loop2): mount failed 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0300000300000007db82456fa79c812600"}) 18:42:08 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x2}, @mcast2}}) 18:42:08 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010801000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5421, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.145249][ T7801] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:08 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0400000300000007db82456fa79c812600"}) 18:42:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5422, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.173432][ T7803] loop2: detected capacity change from 0 to 512 [ 1074.190229][ T7803] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1074.198761][ T7803] EXT4-fs (loop2): mount failed 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x3}, @mcast2}}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5423, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.268846][ T7803] loop2: detected capacity change from 0 to 512 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0500000300000007db82456fa79c812600"}) [ 1074.284463][ T7803] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1074.294016][ T7803] EXT4-fs (loop2): mount failed 18:42:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef011001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x4}, @mcast2}}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5424, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.380165][ T7833] loop2: detected capacity change from 0 to 512 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0600000300000007db82456fa79c812600"}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5425, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x5}, @mcast2}}) [ 1074.453792][ T7833] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1074.462343][ T7833] EXT4-fs (loop2): mount failed 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0700000300000007db82456fa79c812600"}) 18:42:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5427, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x6}, @mcast2}}) [ 1074.558997][ T7848] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1074.583373][ T7850] loop2: detected capacity change from 0 to 512 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0800000300000007db82456fa79c812600"}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5428, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.610072][ T7850] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1074.619606][ T7850] EXT4-fs (loop2): mount failed 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x7}, @mcast2}}) [ 1074.684629][ T7850] loop2: detected capacity change from 0 to 512 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0900000300000007db82456fa79c812600"}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5429, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1074.754846][ T7850] EXT4-fs: failed to create workqueue [ 1074.763329][ T7850] EXT4-fs (loop2): mount failed 18:42:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010005000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x542e, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x8}, @mcast2}}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x542f, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0003000300000007db82456fa79c812600"}) 18:42:09 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010007000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5432, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2}}) 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0005000300000007db82456fa79c812600"}) [ 1074.984583][ T7895] loop2: detected capacity change from 0 to 512 [ 1075.016948][ T7895] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1075.027709][ T7895] EXT4-fs (loop2): mount failed 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5435, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.086530][ T7895] loop2: detected capacity change from 0 to 512 18:42:09 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2}}) 18:42:09 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0006000300000007db82456fa79c812600"}) 18:42:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5437, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.144269][ T7895] EXT4-fs: failed to create workqueue [ 1075.153372][ T7895] EXT4-fs (loop2): mount failed 18:42:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef01000a000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, @mcast2}}) 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5441, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.294457][ T7921] loop2: detected capacity change from 0 to 512 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0007000300000007db82456fa79c812600"}) [ 1075.306022][ T7921] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1075.313894][ T7921] EXT4-fs (loop2): mount failed 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5450, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.367183][ T7930] ptm ptm1: ldisc open failed (-12), clearing slot 1 18:42:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef01000b000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0009000300000007db82456fa79c812600"}) 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x4}, @mcast2}}) [ 1075.431494][ T7940] loop2: detected capacity change from 0 to 512 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5451, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.472020][ T7940] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1075.480510][ T7940] EXT4-fs (loop2): mount failed 18:42:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef01000c000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "730d000300000007db82456fa79c812600"}) 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5452, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, @mcast2}}) [ 1075.595938][ T7961] loop2: detected capacity change from 0 to 512 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5453, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.624750][ T7961] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, @mcast2}}) [ 1075.633371][ T7961] EXT4-fs (loop2): mount failed 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "003f000300000007db82456fa79c812600"}) 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5456, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.716027][ T7961] loop2: detected capacity change from 0 to 512 [ 1075.762302][ T7961] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1075.771181][ T7961] EXT4-fs (loop2): mount failed 18:42:10 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010014000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0d73000300000007db82456fa79c812600"}) 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x7}, @mcast2}}) [ 1075.911138][ T7985] loop2: detected capacity change from 0 to 512 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5457, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1075.946441][ T7985] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1075.955397][ T7985] EXT4-fs (loop2): mount failed 18:42:10 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00ff000300000007db82456fa79c812600"}) 18:42:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x8}, @mcast2}}) 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5459, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1076.025179][ T7985] loop2: detected capacity change from 0 to 512 [ 1076.055783][ T7985] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:42:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545c, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1076.069482][ T7985] EXT4-fs (loop2): mount failed 18:42:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef01001f000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000400000007db82456fa79c812600"}) 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0x0}}}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x545d, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1076.255231][ T8014] loop2: detected capacity change from 0 to 512 [ 1076.279749][ T8014] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1076.288881][ T8014] EXT4-fs (loop2): mount failed 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000700000007db82456fa79c812600"}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5460, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x3}}}) [ 1076.375483][ T8014] loop2: detected capacity change from 0 to 512 [ 1076.401050][ T8014] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1076.410016][ T8014] EXT4-fs (loop2): mount failed 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000900000007db82456fa79c812600"}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x6364, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010037000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x890b, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x4}}}) [ 1076.539186][ T8041] loop2: detected capacity change from 0 to 512 [ 1076.583538][ T8041] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1076.594066][ T8041] EXT4-fs (loop2): mount failed 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000001000000007db82456fa79c812600"}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8913, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef01003f000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x5}}}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8914, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1076.727403][ T8059] loop2: detected capacity change from 0 to 512 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000ff00000007db82456fa79c812600"}) [ 1076.759102][ T8059] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1076.773585][ T8059] EXT4-fs (loop2): mount failed 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x6}}}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x8933, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0002000300000007db82456fa79c812600"}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xae01, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1076.877533][ T8059] loop2: detected capacity change from 0 to 512 [ 1076.894829][ T8059] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1076.903570][ T8059] EXT4-fs (loop2): mount failed 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x7}}}) 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0003000300000007db82456fa79c812600"}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xae41, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:11 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010040000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) [ 1077.041416][ T8088] loop2: detected capacity change from 0 to 512 [ 1077.056981][ T8088] EXT4-fs (loop2): corrupt root inode, run e2fsck 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xae60, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1077.066724][ T8088] EXT4-fs (loop2): mount failed 18:42:11 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0004000300000007db82456fa79c812600"}) 18:42:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x8}}}) 18:42:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0xae80, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1077.199334][ T8088] loop2: detected capacity change from 0 to 512 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0005000300000007db82456fa79c812600"}) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400448c9, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1077.311651][ T8088] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1077.324123][ T8088] EXT4-fs (loop2): mount failed 18:42:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100ff000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0xf}}}) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400448dd, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0006000300000007db82456fa79c812600"}) [ 1077.464569][ T8129] loop2: detected capacity change from 0 to 512 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x10}}}) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400454ca, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1077.517306][ T8129] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1077.527448][ T8129] EXT4-fs (loop2): mount failed 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0007000300000007db82456fa79c812600"}) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x400455c8, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1077.640376][ T8129] loop2: detected capacity change from 0 to 512 [ 1077.678105][ T8129] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1077.689429][ T8129] EXT4-fs (loop2): mount failed 18:42:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010002000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40046602, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0008000300000007db82456fa79c812600"}) 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x14}}}) [ 1077.831654][ T8156] loop2: detected capacity change from 0 to 512 [ 1077.853007][ T8156] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1077.863197][ T8156] EXT4-fs (loop2): mount failed 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40049409, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x39}}}) 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0009000300000007db82456fa79c812600"}) 18:42:12 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010003000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40086602, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000030300000007db82456fa79c812600"}) 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x3e}}}) [ 1078.029630][ T8176] loop2: detected capacity change from 0 to 512 [ 1078.050569][ T8176] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1078.062697][ T8176] EXT4-fs (loop2): mount failed 18:42:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4008ae89, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000050300000007db82456fa79c812600"}) 18:42:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x2, '\x00', 0x0}}}) [ 1078.129815][ T8186] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:12 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000060300000007db82456fa79c812600"}) [ 1078.168622][ T8176] loop2: detected capacity change from 0 to 512 [ 1078.212762][ T8176] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1078.221627][ T8176] EXT4-fs (loop2): mount failed [ 1078.274702][ T8198] ptm ptm0: ldisc open failed (-12), clearing slot 0 18:42:13 executing program 2: syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010004000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed2b000000100000dbf4110e0000655fdcf4655f80000000000004", 0x1b, 0x4200}], 0x0, &(0x7f0000000000)=ANY=[]) 18:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x40186366, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 18:42:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x2, '\x00', 0x3}}}) 18:42:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000070300000007db82456fa79c812600"}) 18:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x401c5820, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) [ 1078.350946][ T8208] loop2: detected capacity change from 0 to 512 18:42:13 executing program 1: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @mcast2={0xff, 0x2, '\x00', 0x4}}}) [ 1078.418774][ T8208] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 1078.428055][ T8208] EXT4-fs (loop2): mount failed 18:42:13 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0x0, "00e5ffffffffffffff00000000ba65002000"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xffffffca) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000090300000007db82456fa79c812600"}) 18:42:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x4020940d, &(0x7f0000000100)={0x730d, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) VM DIAGNOSIS: 18:42:04 Registers: info registers vcpu 0 RAX=0000000000040000 RBX=ffff88802cc3fca0 RCX=ffffc9002a637000 RDX=0000000000040000 RSI=ffffffff816c4e20 RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc9002158f988 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff816c4e46 R11=0000000000000000 R12=ffffed1005987f95 R13=0000000000000002 R14=ffff88802cc3fca8 R15=0000000000000001 RIP=ffffffff816c4e22 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4486000 CR3=000000007311b000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=0a3c1c0c2745bc1b3659d2a922511ca3 XMM02=913ffc9324803e6b6983dcbec563c4cc XMM03=13e92f6e29e125853b879d4cb2ccfc0d XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000000dc75e RBX=ffff8880114b9d00 RCX=ffffffff89396b5f RDX=ffffed100596754b RSI=0000000000000001 RDI=ffffffff893c3b6f RBP=0000000000000001 RSP=ffffc9000043fdf8 R8 =0000000000000000 R9 =ffff88802cb3aa53 R10=ffffed100596754a R11=0000000000000000 R12=ffffed10022973a0 R13=0000000000000001 R14=ffffffff8d6fc650 R15=0000000000000000 RIP=ffffffff893c36ab RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f73ed004 CR3=000000006cafa000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0f02000a8be006404000408001a82045 XMM02=3e04ff626adf768c82e2efcbf82f5f92 XMM03=13781b56946cef9f3ec936106aa0b879 XMM04=204500085734120054520202000a5552 XMM05=fc6d5c1d0aa37557339530ff518bcb30 XMM06=8f6605b5c9de5afe6615318b63f99eb2 XMM07=c39505c9b52453a913781b56946cef9f XMM08=920ef1af4a519d723e04ff626adf768c XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff843711ac RDI=ffffffff9055eb60 RBP=ffffffff9055eb20 RSP=ffffc9000e7573c8 R8 =000000000000004e R9 =0000000000000000 R10=ffffffff8437119d R11=000000000000001f R12=0000000000000000 R13=fffffbfff20abdb7 R14=fffffbfff20abd6e R15=dffffc0000000000 RIP=ffffffff843711d2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 000fffff 00000000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030322000 CR3=00000000717a5000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000001a4 XMM01=6882e54c0c2ad7285f2259cf2d732ba8 XMM02=d0bc70f068b6b6cc795efff766fe9e9a XMM03=b8d0ae66db08674775c607558935ccb8 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=000000000000000a RCX=ffff88801a67ba00 RDX=0000000000000000 RSI=ffff88801a67ba00 RDI=0000000000000003 RBP=ffff88801e278380 RSP=ffffc90000d875a8 R8 =0000000000000000 R9 =000000000000000a R10=ffffffff83a1f03a R11=0000000000000010 R12=0000000000000002 R13=00000000000002c9 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff83a1f03a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f29cb692840 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564969ac2818 CR3=00000000191d1000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00ff000000000000ff00000000000000 XMM02=ffffffffffffff00ffff000000000000 XMM03=000000000000000000000000000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=65726168732f6372732f2e2e2f2e2e00 XMM09=00000000000000000000000000000000 XMM10=7373737373737373737316141d121b10 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000