2fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) 12:57:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1888.664964][T12745] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1888.686144][T12745] EXT4-fs (loop3): failed to parse options in superblock:  [ 1888.759656][T12745] EXT4-fs (loop3): filesystem is read-only 12:57:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1888.807012][T12745] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1888.909518][T12745] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) [ 1888.956971][T12745] EXT4-fs (loop3): failed to parse options in superblock:  [ 1888.990815][T12745] EXT4-fs (loop3): filesystem is read-only [ 1888.996900][T12745] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) 12:57:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/111, 0x6f}], 0x100000000000026f, &(0x7f00000002c0)=""/161, 0x1d}, 0x5}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000540)=""/30, 0xd3}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/192, 0xc0}], 0x4}, 0x4b}, {{&(0x7f0000000740)=@can, 0x80, &(0x7f0000001a00), 0x5, &(0x7f0000001a80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002a80)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002b00)=""/74, 0x4a}], 0x1, &(0x7f0000002bc0)=""/245, 0xf5}, 0xfff}, {{&(0x7f0000004000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002d40)=""/4096, 0xfffffe93}, {&(0x7f0000003d40)=""/193, 0xc1}], 0x2, &(0x7f0000003e80)=""/52, 0x34}, 0x6}], 0x5, 0x0, 0x0) [ 1889.232897][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1889.232912][ T26] audit: type=1326 audit(1560430667.664:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12730 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xac}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1889.316763][T12778] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1889.372331][T12778] EXT4-fs (loop3): failed to parse options in superblock:  [ 1889.405543][T12778] EXT4-fs (loop3): filesystem is read-only [ 1889.424075][T12778] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x81, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000001c0)={r3, 0x3}) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @broadcast, [{}], {@arp={0x806, @ether_ipv4={0x1, 0x87d, 0x6, 0x4, 0x0, @random="10c804d49ff8", @local, @remote, @loopback}}}}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) connect$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x1, 0x2, 0x7, 0x5, 0x7fffffff, "24bab1a93c5f4531570f9827826c36bf813692c85f1f4ef397ef1e6bc9fd93439d24594b3a88365ef5f638f68134ea69668fb23f5c010046bf268f3fd4b3fa", 0x18}, 0x60) [ 1889.462189][ T26] audit: type=1326 audit(1560430667.894:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12790 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1889.561027][T12778] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1889.612900][T12778] EXT4-fs (loop3): failed to parse options in superblock:  [ 1889.648396][T12778] EXT4-fs (loop3): filesystem is read-only 12:57:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) [ 1889.680054][T12778] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1889.686931][T12801] QAT: Invalid ioctl 12:57:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1889.726083][T12801] QAT: Invalid ioctl [ 1889.732747][T12801] QAT: Invalid ioctl 12:57:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1889.803802][T12808] QAT: Invalid ioctl [ 1889.817851][T12801] QAT: Invalid ioctl [ 1889.833769][T12801] QAT: Invalid ioctl 12:57:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:48 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:48 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000180)=0x9, 0x1) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x191000) connect$inet6(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x80800) uname(&(0x7f0000000200)) connect$packet(r2, &(0x7f00000001c0)={0x11, 0x6, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) [ 1889.970471][T12818] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1890.040761][T12818] EXT4-fs (loop3): failed to parse options in superblock:  [ 1890.074023][T12818] EXT4-fs (loop3): filesystem is read-only [ 1890.090772][T12818] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1890.168659][T12818] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1890.197296][T12818] EXT4-fs (loop3): failed to parse options in superblock:  12:57:48 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xb1}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1890.211035][ T26] audit: type=1326 audit(1560430668.644:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12790 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1890.219977][T12818] EXT4-fs (loop3): filesystem is read-only [ 1890.246948][T12818] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:57:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000004f40000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:48 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x1000000000000002, 0x300) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x480800) r1 = socket(0xc, 0x80000, 0x2) connect$inet6(r1, 0x0, 0xfffffffffffffe62) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) 12:57:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1890.426200][ T26] audit: type=1326 audit(1560430668.854:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1890.597707][T12855] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1890.647509][T12855] EXT4-fs (loop3): failed to parse options in superblock:  [ 1890.661043][T12855] EXT4-fs (loop3): filesystem is read-only [ 1890.674069][T12855] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1890.775175][T12855] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1890.859554][T12855] EXT4-fs (loop3): failed to parse options in superblock:  [ 1890.883645][T12855] EXT4-fs (loop3): filesystem is read-only [ 1890.899506][T12855] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1891.169619][T12886] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1891.202686][ T26] audit: type=1326 audit(1560430669.634:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12845 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1891.233910][T12886] EXT4-fs (loop3): failed to parse options in superblock:  12:57:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x300}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:57:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1891.313133][T12886] EXT4-fs (loop3): filesystem is read-only [ 1891.345394][T12886] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1891.458090][ T26] audit: type=1326 audit(1560430669.884:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12902 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:49 executing program 0: socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 12:57:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:49 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1891.551294][T12886] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) [ 1891.601455][T12886] EXT4-fs (loop3): failed to parse options in superblock:  12:57:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1891.674287][T12886] EXT4-fs (loop3): filesystem is read-only [ 1891.712338][T12886] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x5, 0x6, &(0x7f00000000c0)=0x7fff}) connect$inet6(r1, 0x0, 0xff52) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x6, 0x5, 0x6, 0x7, 0x7}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x4cb8}) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) 12:57:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005140000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1891.979411][T12934] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1892.019355][T12934] EXT4-fs (loop3): failed to parse options in superblock:  [ 1892.065910][T12934] EXT4-fs (loop3): filesystem is read-only [ 1892.094639][T12934] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1892.186907][T12934] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1892.201387][T12934] EXT4-fs (loop3): failed to parse options in superblock:  [ 1892.215387][T12934] EXT4-fs (loop3): filesystem is read-only [ 1892.222346][T12934] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x500}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) 12:57:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1892.248068][ T26] audit: type=1326 audit(1560430670.674:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12902 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:50 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) 12:57:50 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1892.400378][ T26] audit: type=1326 audit(1560430670.824:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12955 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1892.572412][T12959] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1892.607574][T12959] EXT4-fs (loop3): failed to parse options in superblock:  12:57:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1892.667035][T12959] EXT4-fs (loop3): filesystem is read-only [ 1892.703401][T12959] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:51 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1892.790928][T12959] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1892.830208][T12959] EXT4-fs (loop3): failed to parse options in superblock:  12:57:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1892.872145][T12959] EXT4-fs (loop3): filesystem is read-only [ 1892.908272][T12959] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1893.204380][ T26] audit: type=1326 audit(1560430671.634:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12955 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x600}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:51 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 12:57:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005340000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1893.367449][T13008] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1893.396841][T13008] EXT4-fs (loop3): failed to parse options in superblock:  [ 1893.426237][ T26] audit: type=1326 audit(1560430671.854:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13013 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1893.455304][T13008] EXT4-fs (loop3): filesystem is read-only 12:57:51 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x800, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000440)=""/249, 0xf9}, {&(0x7f0000000540)=""/201, 0xc9}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f00000003c0)=""/12, 0xc}, 0x1}], 0x1, 0x0, 0x0) 12:57:51 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1893.500909][T13008] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) [ 1893.605170][T13008] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1893.643881][T13008] EXT4-fs (loop3): failed to parse options in superblock:  12:57:52 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1893.684975][T13008] EXT4-fs (loop3): filesystem is read-only [ 1893.709487][T13008] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1893.965283][T13041] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1893.980976][ C0] net_ratelimit: 11 callbacks suppressed [ 1893.980984][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1893.992834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.012419][T13041] EXT4-fs (loop3): failed to parse options in superblock:  [ 1894.038546][T13041] EXT4-fs (loop3): filesystem is read-only [ 1894.048023][T13041] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1894.165322][T13041] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1894.173520][T13041] EXT4-fs (loop3): failed to parse options in superblock:  [ 1894.181666][T13041] EXT4-fs (loop3): filesystem is read-only [ 1894.187770][T13041] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:52 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005540000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 12:57:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x700}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1894.300618][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.300624][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.300671][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.306506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.312530][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1894.329845][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1894.340350][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1894.340363][ T26] audit: type=1326 audit(1560430672.774:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13053 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1f, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0xfffffffffffffffe, @mcast1, 0xdb39}}, 0x1, 0x2}, 0x90) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000180)=""/238, &(0x7f0000000040)=0xee) recvmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000440)=@x25, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f00000005c0)=""/14, 0xe}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000000700)=""/125, 0x7d}, {&(0x7f0000000780)=""/29, 0x1d}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/15, 0xf}], 0x8, &(0x7f0000000980)=""/254, 0xfe}, 0x3ff}, {{&(0x7f0000000a80)=@nfc_llcp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/102, 0x66}], 0x1, &(0x7f0000000bc0)=""/131, 0x83}, 0x6}, {{&(0x7f0000000c80)=@rc, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/96, 0x60}], 0x1, &(0x7f0000000dc0)=""/61, 0x3d}, 0x4}, {{&(0x7f0000000e00)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000e80)=""/143, 0x8f}, {&(0x7f0000000f40)=""/87, 0x57}, {&(0x7f0000000fc0)=""/239, 0xef}, {&(0x7f00000010c0)=""/253, 0xfd}, {&(0x7f00000011c0)=""/184, 0xb8}, {&(0x7f0000001280)=""/213, 0xd5}], 0x6}, 0x400}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/153, 0x99}], 0x1, &(0x7f0000001500)=""/191, 0xbf}, 0x3ff}, {{&(0x7f00000015c0)=@generic, 0x80, &(0x7f0000001800)=[{&(0x7f0000001640)=""/146, 0x92}, {&(0x7f0000001700)=""/195, 0xc3}], 0x2, &(0x7f0000001840)=""/159, 0x9f}, 0x81}, {{&(0x7f0000001900)=@nfc, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/235, 0xeb}], 0x1, &(0x7f0000001ac0)=""/114, 0x72}, 0x63d}, {{&(0x7f0000001b40), 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001bc0)=""/220, 0xdc}, {&(0x7f0000001cc0)=""/76, 0x4c}, {&(0x7f0000001d40)=""/69, 0x45}], 0x3}, 0x2}, {{&(0x7f0000001e00)=@ethernet, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e80)=""/59, 0x3b}], 0x1, &(0x7f0000001f00)=""/212, 0xd4}}], 0x9, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 12:57:52 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1894.528097][T13063] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1894.579218][T13063] EXT4-fs (loop3): failed to parse options in superblock:  12:57:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:53 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1894.619489][T13063] EXT4-fs (loop3): filesystem is read-only [ 1894.649262][T13063] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1894.810549][T13063] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1894.844175][T13063] EXT4-fs (loop3): failed to parse options in superblock:  12:57:53 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1894.880143][T13063] EXT4-fs (loop3): filesystem is read-only [ 1894.905419][T13063] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005640000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1895.145629][ T26] audit: type=1326 audit(1560430673.574:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13053 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1895.206758][T13100] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1895.222078][T13100] EXT4-fs (loop3): failed to parse options in superblock:  12:57:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x900}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:53 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1895.266971][T13100] EXT4-fs (loop3): filesystem is read-only [ 1895.293102][T13100] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:53 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x10000e0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}, 0x1, 0x2000000000000000}, 0x0) [ 1895.381340][T13100] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:53 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1895.420170][ T26] audit: type=1326 audit(1560430673.844:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13112 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1895.464354][T13100] EXT4-fs (loop3): failed to parse options in superblock:  12:57:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1895.490719][T13100] EXT4-fs (loop3): filesystem is read-only [ 1895.524024][T13100] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005740000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:54 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:54 executing program 0: [ 1895.920913][T13140] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1896.010114][T13140] EXT4-fs (loop3): failed to parse options in superblock:  [ 1896.068536][T13140] EXT4-fs (loop3): filesystem is read-only [ 1896.075689][T13140] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1896.151308][T13140] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1896.163495][T13140] EXT4-fs (loop3): failed to parse options in superblock:  [ 1896.184846][T13140] EXT4-fs (loop3): filesystem is read-only 12:57:54 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xc00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:54 executing program 0: 12:57:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1896.206227][T13140] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1896.217808][ T26] audit: type=1326 audit(1560430674.644:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13112 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:54 executing program 0: 12:57:54 executing program 1: mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1896.377239][ T26] audit: type=1326 audit(1560430674.804:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13166 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:54 executing program 0: 12:57:55 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1896.569147][T13178] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1896.649108][T13178] EXT4-fs (loop3): failed to parse options in superblock:  [ 1896.678998][T13178] EXT4-fs (loop3): filesystem is read-only [ 1896.710102][T13178] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:55 executing program 0: [ 1896.811647][T13178] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1896.842372][T13178] EXT4-fs (loop3): failed to parse options in superblock:  [ 1896.860830][T13178] EXT4-fs (loop3): filesystem is read-only [ 1896.911905][T13178] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1897.151344][ T26] audit: type=1326 audit(1560430675.584:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13166 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:55 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:55 executing program 0: 12:57:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1897.275121][T13210] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1897.320644][T13210] EXT4-fs (loop3): failed to parse options in superblock:  [ 1897.337408][ T26] audit: type=1326 audit(1560430675.764:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13220 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 12:57:55 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1897.370139][T13210] EXT4-fs (loop3): filesystem is read-only 12:57:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1897.429821][T13210] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:55 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:56 executing program 0: getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) msgget$private(0x0, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) setns(0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, &(0x7f0000000080)) clone(0x10062101, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 1897.557880][T13210] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1897.602683][T13210] EXT4-fs (loop3): failed to parse options in superblock:  [ 1897.619806][T13210] EXT4-fs (loop3): filesystem is read-only [ 1897.659995][T13210] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1897.683038][T13240] QAT: Invalid ioctl [ 1898.131829][ T26] audit: type=1326 audit(1560430676.564:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13220 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1500}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140)) 12:57:56 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005a40000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:57:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9f~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\x01\xd0`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 12:57:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:56 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1898.289548][T13266] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1898.307810][ T26] audit: type=1326 audit(1560430676.734:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13276 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1898.324120][T13266] EXT4-fs (loop3): failed to parse options in superblock:  12:57:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1898.437358][T13266] EXT4-fs (loop3): filesystem is read-only [ 1898.495508][T13266] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:57 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1898.687763][T13266] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1898.728684][T13266] EXT4-fs (loop3): failed to parse options in superblock:  [ 1898.760741][T13266] EXT4-fs (loop3): filesystem is read-only [ 1898.766735][T13266] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1600}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9f~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\x01\xd0`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 12:57:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:57 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1899.108872][ T26] audit: type=1326 audit(1560430677.534:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13276 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1899.232651][T13325] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:57:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:57 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1899.285481][T13325] EXT4-fs (loop3): failed to parse options in superblock:  12:57:57 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1899.381897][T13325] EXT4-fs (loop3): filesystem is read-only 12:57:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) [ 1899.429973][T13325] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1899.592101][T13325] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1899.612790][T13325] EXT4-fs (loop3): failed to parse options in superblock:  [ 1899.620320][T13325] EXT4-fs (loop3): filesystem is read-only [ 1899.659739][T13325] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x8000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:58 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000240)=0x10) fallocate(0xffffffffffffffff, 0x22, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12:57:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1900.070272][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1900.070287][ T26] audit: type=1326 audit(1560430678.494:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13331 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1900.186411][T13376] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1900.213381][ T26] audit: type=1326 audit(1560430678.644:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13381 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:58 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1900.229423][T13376] EXT4-fs (loop3): failed to parse options in superblock:  [ 1900.300099][T13376] EXT4-fs (loop3): filesystem is read-only [ 1900.331403][T13376] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1900.435088][T13376] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1900.450754][T13376] EXT4-fs (loop3): failed to parse options in superblock:  [ 1900.474084][T13376] EXT4-fs (loop3): filesystem is read-only 12:57:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 12:57:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1900.498707][T13376] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1901.008935][ T26] audit: type=1326 audit(1560430679.434:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13381 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:57:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1d00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:57:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:59 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:57:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:57:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, 0x0, 0x0, 0x0) 12:57:59 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1901.163281][T13424] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1901.180119][ T26] audit: type=1326 audit(1560430679.604:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13428 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1901.184341][T13424] EXT4-fs (loop3): failed to parse options in superblock:  12:57:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, 0x0, 0x0, 0x0) 12:57:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1901.216354][T13424] EXT4-fs (loop3): filesystem is read-only [ 1901.223276][T13424] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:57:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:57:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:57:59 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1901.545152][T13447] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1901.557008][T13447] EXT4-fs (loop3): failed to parse options in superblock:  [ 1901.579555][T13447] EXT4-fs (loop3): filesystem is read-only [ 1901.604800][T13447] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1901.743334][T13447] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1901.770800][T13447] EXT4-fs (loop3): failed to parse options in superblock:  [ 1901.790786][T13447] EXT4-fs (loop3): filesystem is read-only [ 1901.797178][T13447] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1901.959803][ T26] audit: type=1326 audit(1560430680.384:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13428 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, r1, 0x0, 0x0) 12:58:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x10000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:00 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r0, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, r1, 0x0, 0x0) [ 1902.084261][T13470] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1902.140891][ T26] audit: type=1326 audit(1560430680.574:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1902.143915][T13470] EXT4-fs (loop3): failed to parse options in superblock:  12:58:00 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x11000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, r1, 0x0, 0x0) [ 1902.260777][T13470] EXT4-fs (loop3): filesystem is read-only [ 1902.284580][T13470] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1902.457994][T13470] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:00 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1902.500756][T13470] EXT4-fs (loop3): failed to parse options in superblock:  [ 1902.530819][T13470] EXT4-fs (loop3): filesystem is read-only [ 1902.537355][T13470] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2100}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x12000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, 0x0) ptrace$setregset(0x21, r1, 0x0, 0x0) 12:58:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:01 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:01 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1902.935767][ T26] audit: type=1326 audit(1560430681.364:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1903.080660][T13513] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1903.103820][ T26] audit: type=1326 audit(1560430681.534:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13518 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:01 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1903.111113][T13513] EXT4-fs (loop3): failed to parse options in superblock:  12:58:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0xffffffffffffffff, r1) ptrace$setregset(0x21, r1, 0x0, 0x0) 12:58:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x13000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1903.214535][T13513] EXT4-fs (loop3): filesystem is read-only [ 1903.241964][T13513] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:01 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1903.350365][T13513] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1903.387373][T13513] EXT4-fs (loop3): failed to parse options in superblock:  12:58:01 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1903.414859][T13513] EXT4-fs (loop3): filesystem is read-only 12:58:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x14000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1903.471677][T13513] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0x20007ffc) 12:58:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000000780000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:02 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:02 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1903.896287][ T26] audit: type=1326 audit(1560430682.314:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13518 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1904.006333][T13562] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1904.033801][T13562] EXT4-fs (loop3): failed to parse options in superblock:  12:58:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 12:58:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1904.042458][ T26] audit: type=1326 audit(1560430682.474:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13561 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1904.050960][T13562] EXT4-fs (loop3): filesystem is read-only 12:58:02 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1904.120831][T13562] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff7f]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1904.286576][T13562] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1904.327420][T13562] EXT4-fs (loop3): failed to parse options in superblock:  [ 1904.358244][T13562] EXT4-fs (loop3): filesystem is read-only 12:58:02 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1904.378017][T13562] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2500}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 12:58:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x40030000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:03 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1904.971051][T13613] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1905.000669][T13613] EXT4-fs (loop3): failed to parse options in superblock:  12:58:03 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1905.045455][T13613] EXT4-fs (loop3): filesystem is read-only [ 1905.060879][T13613] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1905.212122][T13613] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1905.261636][T13613] EXT4-fs (loop3): failed to parse options in superblock:  12:58:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 12:58:03 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1905.314772][T13613] EXT4-fs (loop3): filesystem is read-only [ 1905.335747][T13613] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2800}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:04 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair(0xa, 0x0, 0xefec, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) [ 1905.818920][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1905.818934][ T26] audit: type=1326 audit(1560430684.244:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13619 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:04 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1905.965597][ T26] audit: type=1326 audit(1560430684.394:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13666 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1906.015639][T13662] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1906.085990][T13662] EXT4-fs (loop3): failed to parse options in superblock:  12:58:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1906.159523][T13662] EXT4-fs (loop3): filesystem is read-only [ 1906.181767][T13662] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:04 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x500000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1906.266521][T13662] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1906.336444][T13662] EXT4-fs (loop3): failed to parse options in superblock:  12:58:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair(0xa, 0x0, 0xefec, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) [ 1906.390770][T13662] EXT4-fs (loop3): filesystem is read-only [ 1906.397212][T13662] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x600000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1906.768806][ T26] audit: type=1326 audit(1560430685.194:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13666 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair(0xa, 0x0, 0xefec, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x20007ffc) 12:58:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x800000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1906.933308][T13709] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1906.952763][ T26] audit: type=1326 audit(1560430685.384:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13714 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1907.029996][T13709] EXT4-fs (loop3): failed to parse options in superblock:  12:58:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1907.088204][T13709] EXT4-fs (loop3): filesystem is read-only [ 1907.123547][T13709] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x900000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:05 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) pipe2(0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setregset(0x21, r1, 0x0, 0x0) [ 1907.285719][T13709] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1907.321315][T13709] EXT4-fs (loop3): failed to parse options in superblock:  [ 1907.328776][T13709] EXT4-fs (loop3): filesystem is read-only [ 1907.393237][T13709] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1907.754313][ T26] audit: type=1326 audit(1560430686.184:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13714 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2d00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xa00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:06 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1907.905442][T13752] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1907.934519][T13752] EXT4-fs (loop3): failed to parse options in superblock:  12:58:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1907.951869][ T26] audit: type=1326 audit(1560430686.384:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13758 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1907.981259][T13752] EXT4-fs (loop3): filesystem is read-only [ 1907.987337][T13752] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:06 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) pipe2(0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) 12:58:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xb00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1908.124432][T13752] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1908.213692][T13752] EXT4-fs (loop3): failed to parse options in superblock:  [ 1908.245424][T13752] EXT4-fs (loop3): filesystem is read-only 12:58:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000200)={0x0, 0x0}) pipe2(0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000040)=""/46) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) [ 1908.272264][T13752] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1908.571407][T13783] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1908.605854][T13783] EXT4-fs (loop3): failed to parse options in superblock:  [ 1908.644631][T13783] EXT4-fs (loop3): filesystem is read-only [ 1908.678685][T13783] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1908.737132][ T26] audit: type=1326 audit(1560430687.164:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13758 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1908.820097][T13783] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1908.854537][T13783] EXT4-fs (loop3): failed to parse options in superblock:  [ 1908.893519][T13783] EXT4-fs (loop3): filesystem is read-only [ 1908.919520][T13783] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:07 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xf00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1908.979727][ T26] audit: type=1326 audit(1560430687.404:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13793 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1909.259725][T13807] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1909.285735][T13807] EXT4-fs (loop3): failed to parse options in superblock:  [ 1909.325227][T13807] EXT4-fs (loop3): filesystem is read-only [ 1909.358447][T13807] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1909.474233][T13807] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:07 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7b") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1909.539467][T13807] EXT4-fs (loop3): failed to parse options in superblock:  [ 1909.559396][T13807] EXT4-fs (loop3): filesystem is read-only 12:58:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1909.584328][T13807] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1909.720156][ T26] audit: type=1326 audit(1560430688.144:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13793 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1910.682898][ T8963] device bridge_slave_1 left promiscuous mode [ 1910.689473][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1910.751974][ T8963] device bridge_slave_0 left promiscuous mode [ 1910.758492][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.492972][ T8963] device hsr_slave_1 left promiscuous mode [ 1912.547254][ T8963] device hsr_slave_0 left promiscuous mode [ 1912.606486][ T8963] team0 (unregistering): Port device team_slave_1 removed [ 1912.619023][ T8963] team0 (unregistering): Port device team_slave_0 removed [ 1912.635151][ T8963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1912.685257][ T8963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1912.790295][ T8963] bond0 (unregistering): Released all slaves [ 1912.870312][T13837] IPVS: ftp: loaded support on port[0] = 21 [ 1912.940453][T13837] chnl_net:caif_netlink_parms(): no params data found [ 1912.969577][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1912.976925][T13837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1912.984668][T13837] device bridge_slave_0 entered promiscuous mode [ 1912.995933][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.004021][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.012385][T13837] device bridge_slave_1 entered promiscuous mode [ 1913.031092][T13837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1913.042424][T13837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1913.065407][T13837] team0: Port device team_slave_0 added [ 1913.072937][T13837] team0: Port device team_slave_1 added [ 1913.173786][T13837] device hsr_slave_0 entered promiscuous mode [ 1913.201132][T13837] device hsr_slave_1 entered promiscuous mode [ 1913.293750][T13837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.300905][T13837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1913.308298][T13837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.315450][T13837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1913.390770][T13837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1913.412994][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1913.428659][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1913.436681][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1913.458248][T13837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1913.474711][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1913.484105][ T8977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1913.491221][ T8977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1913.512453][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1913.522396][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1913.529507][ T9341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1913.552635][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1913.562064][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1913.570928][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1913.585087][T13837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1913.596831][T13837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1913.606966][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1913.615527][ T8977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1913.647120][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 12:58:12 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005100000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:12 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1913.861406][ T26] audit: type=1326 audit(1560430692.294:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13846 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:12 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1913.952572][T13853] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1913.981383][T13853] EXT4-fs (loop3): failed to parse options in superblock:  [ 1914.032450][T13853] EXT4-fs (loop3): filesystem is read-only [ 1914.141238][T13853] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1914.157714][T13865] EXT4-fs (loop0): Unrecognized mount option "" or missing value 12:58:12 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be0") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1914.188667][T13865] EXT4-fs (loop0): failed to parse options in superblock:  [ 1914.227771][T13865] EXT4-fs (loop0): filesystem is read-only 12:58:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1914.246769][T13865] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 35940 [ 1914.426600][T13853] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1914.473489][T13853] EXT4-fs (loop3): failed to parse options in superblock:  [ 1914.500853][T13853] EXT4-fs (loop3): filesystem is read-only [ 1914.541811][T13853] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:13 executing program 0: perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 1914.629490][ T26] audit: type=1326 audit(1560430693.054:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13846 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:13 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) 12:58:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3500}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1914.888513][ T26] audit: type=1326 audit(1560430693.304:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13903 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:13 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1915.012399][T13912] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1915.063942][T13912] EXT4-fs (loop3): failed to parse options in superblock:  [ 1915.112767][T13912] EXT4-fs (loop3): filesystem is read-only [ 1915.137753][T13912] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000001080000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:13 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x800000000002b, 'pids'}]}, 0x6) [ 1915.540034][T13935] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1915.585492][T13935] EXT4-fs (loop3): failed to parse options in superblock:  [ 1915.617754][T13935] EXT4-fs (loop3): filesystem is read-only [ 1915.639010][T13935] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1915.664374][ T26] audit: type=1326 audit(1560430694.094:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13903 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1915.776504][T13935] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1915.801241][T13935] EXT4-fs (loop3): failed to parse options in superblock:  [ 1915.808728][T13935] EXT4-fs (loop3): filesystem is read-only [ 1915.834087][T13935] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:14 executing program 0: perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:58:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:14 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, 0x0, 0x0) 12:58:14 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1915.941637][ T26] audit: type=1326 audit(1560430694.374:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13950 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:14 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, 0x0, 0x0) [ 1916.191280][T13966] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1916.275407][T13966] EXT4-fs (loop3): failed to parse options in superblock:  [ 1916.344887][T13966] EXT4-fs (loop3): filesystem is read-only [ 1916.384626][T13966] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:14 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, 0x0, 0x0) 12:58:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1916.511960][T13966] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1916.595492][T13966] EXT4-fs (loop3): failed to parse options in superblock:  [ 1916.610736][T13966] EXT4-fs (loop3): filesystem is read-only [ 1916.649897][T13966] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1916.742553][ T26] audit: type=1326 audit(1560430695.174:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13950 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:15 executing program 0: perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 12:58:15 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180), 0x0) 12:58:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3d00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1917.114628][ T26] audit: type=1326 audit(1560430695.544:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14007 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1917.159825][T14014] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:15 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180), 0x0) [ 1917.200576][T14014] EXT4-fs (loop3): failed to parse options in superblock:  [ 1917.233414][T14014] EXT4-fs (loop3): filesystem is read-only [ 1917.241171][T14014] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:15 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1917.335557][T14014] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1917.371668][T14014] EXT4-fs (loop3): failed to parse options in superblock:  12:58:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:15 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180), 0x0) [ 1917.411451][T14014] EXT4-fs (loop3): filesystem is read-only [ 1917.434109][T14014] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1917.800201][T14050] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1917.829012][T14050] EXT4-fs (loop3): failed to parse options in superblock:  [ 1917.891157][T14050] EXT4-fs (loop3): filesystem is read-only [ 1917.908350][ T26] audit: type=1326 audit(1560430696.334:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14007 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1917.926069][T14050] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1918.018782][T14050] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1918.038257][T14050] EXT4-fs (loop3): failed to parse options in superblock:  [ 1918.056937][T14050] EXT4-fs (loop3): filesystem is read-only [ 1918.071046][T14050] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:16 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000002700000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:16 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x0, 'pids'}]}, 0x6) 12:58:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3f00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1918.167849][ T26] audit: type=1326 audit(1560430696.594:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14063 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:16 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x0, 'pids'}]}, 0x6) 12:58:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1918.310827][T14078] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 1918.320799][T14076] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1918.360963][T14078] EXT4-fs (loop0): failed to parse options in superblock:  [ 1918.390055][T14076] EXT4-fs (loop3): failed to parse options in superblock:  12:58:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1918.418498][T14078] EXT4-fs (loop0): filesystem is read-only [ 1918.443251][T14076] EXT4-fs (loop3): filesystem is read-only [ 1918.453222][T14078] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 35940 12:58:16 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x0, 'pids'}]}, 0x6) [ 1918.527546][T14076] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:17 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) 12:58:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) 12:58:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1918.850854][T14106] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1918.881640][T14106] EXT4-fs (loop3): failed to parse options in superblock:  [ 1918.903161][T14110] input: syz1 as /devices/virtual/input/input28 [ 1918.950730][T14106] EXT4-fs (loop3): filesystem is read-only [ 1918.956793][T14106] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1918.973517][ T26] audit: type=1326 audit(1560430697.404:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14063 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1919.031999][T14119] input: syz1 as /devices/virtual/input/input29 [ 1919.113755][T14106] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1919.171573][T14106] EXT4-fs (loop3): failed to parse options in superblock:  [ 1919.199052][T14106] EXT4-fs (loop3): filesystem is read-only 12:58:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:17 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) 12:58:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1919.220345][T14106] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1919.245165][ T26] audit: type=1326 audit(1560430697.674:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14131 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:17 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) 12:58:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1919.473346][T14146] input: syz1 as /devices/virtual/input/input30 12:58:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1919.609550][T14150] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1919.657642][T14150] EXT4-fs (loop3): failed to parse options in superblock:  [ 1919.670415][T14159] input: syz1 as /devices/virtual/input/input31 12:58:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) [ 1919.724345][T14150] EXT4-fs (loop3): filesystem is read-only [ 1919.755059][T14150] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1919.866438][T14150] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1919.914666][T14150] EXT4-fs (loop3): failed to parse options in superblock:  [ 1919.951895][T14150] EXT4-fs (loop3): filesystem is read-only [ 1919.980616][T14150] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1920.020808][T14179] input: syz1 as /devices/virtual/input/input32 [ 1920.048496][ T26] audit: type=1326 audit(1560430698.474:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14131 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) ioctl$TIOCCBRK(r4, 0x5428) 12:58:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1920.167424][ T26] audit: type=1326 audit(1560430698.594:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14188 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1920.237696][T14190] input: syz1 as /devices/virtual/input/input33 12:58:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) 12:58:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1920.363194][T14200] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1920.424636][T14200] EXT4-fs (loop3): failed to parse options in superblock:  12:58:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:18 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) [ 1920.507551][T14200] EXT4-fs (loop3): filesystem is read-only [ 1920.547713][T14200] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1920.566988][T14213] input: syz1 as /devices/virtual/input/input34 12:58:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1920.656234][T14200] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1920.697150][T14200] EXT4-fs (loop3): failed to parse options in superblock:  12:58:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1920.740632][T14200] EXT4-fs (loop3): filesystem is read-only [ 1920.766242][T14200] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1920.792725][T14224] input: syz1 as /devices/virtual/input/input35 12:58:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000001880000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1920.966544][ T26] audit: type=1326 audit(1560430699.394:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14188 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4500}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1921.022950][T14240] input: syz1 as /devices/virtual/input/input36 [ 1921.182778][ T26] audit: type=1326 audit(1560430699.614:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14249 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) [ 1921.248475][T14257] input: syz1 as /devices/virtual/input/input37 [ 1921.300055][T14254] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1921.388704][T14254] EXT4-fs (loop3): failed to parse options in superblock:  [ 1921.400665][T14254] EXT4-fs (loop3): filesystem is read-only [ 1921.415872][T14254] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) [ 1921.490691][T14267] input: syz1 as /devices/virtual/input/input38 [ 1921.531257][T14254] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1921.601702][T14254] EXT4-fs (loop3): failed to parse options in superblock:  12:58:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1921.653407][T14254] EXT4-fs (loop3): filesystem is read-only [ 1921.671695][T14283] input: syz1 as /devices/virtual/input/input39 [ 1921.681014][T14254] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1921.973251][ T26] audit: type=1326 audit(1560430700.404:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14249 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1922.003178][T14297] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4800}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1922.030836][T14297] EXT4-fs (loop3): failed to parse options in superblock:  [ 1922.045372][T14297] EXT4-fs (loop3): filesystem is read-only 12:58:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1922.084660][T14297] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1922.147709][ T26] audit: type=1326 audit(1560430700.574:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14308 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1922.218844][T14297] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1922.240674][T14297] EXT4-fs (loop3): failed to parse options in superblock:  12:58:20 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1922.280203][T14297] EXT4-fs (loop3): filesystem is read-only [ 1922.301282][T14297] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:20 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) 12:58:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1922.469696][T14326] input: syz1 as /devices/virtual/input/input40 12:58:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, 0x0, 0x0, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1922.620159][T14339] input: syz1 as /devices/virtual/input/input41 [ 1922.671092][T14337] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1922.728481][T14337] EXT4-fs (loop3): failed to parse options in superblock:  [ 1922.765812][T14337] EXT4-fs (loop3): filesystem is read-only 12:58:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, 0x0, 0x0, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1922.807517][T14337] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1922.895019][T14337] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1922.903264][T14337] EXT4-fs (loop3): failed to parse options in superblock:  [ 1922.922582][T14337] EXT4-fs (loop3): filesystem is read-only 12:58:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4a00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1922.944288][T14337] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1922.954340][ T26] audit: type=1326 audit(1560430701.384:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14308 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, 0x0, 0x0, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1923.095252][ T26] audit: type=1326 audit(1560430701.524:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14364 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1923.203922][T14371] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1923.242791][T14371] EXT4-fs (loop3): failed to parse options in superblock:  12:58:21 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r3, 0x0) 12:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1923.260905][T14371] EXT4-fs (loop3): filesystem is read-only [ 1923.284196][T14371] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:21 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) 12:58:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1923.402433][T14371] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1923.430987][T14384] input: syz1 as /devices/virtual/input/input42 [ 1923.460721][T14371] EXT4-fs (loop3): failed to parse options in superblock:  [ 1923.511079][T14371] EXT4-fs (loop3): filesystem is read-only [ 1923.520703][T14371] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1923.631516][T14396] input: syz1 as /devices/virtual/input/input43 12:58:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1923.880046][T14405] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1923.930069][T14405] EXT4-fs (loop3): failed to parse options in superblock:  [ 1923.962785][T14405] EXT4-fs (loop3): filesystem is read-only 12:58:22 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1923.987232][T14405] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) 12:58:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1924.099183][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1924.099197][ T26] audit: type=1326 audit(1560430702.524:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:22 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r3, 0x0) [ 1924.295167][T14425] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1924.340909][T14425] EXT4-fs (loop3): failed to parse options in superblock:  [ 1924.367490][T14425] EXT4-fs (loop3): filesystem is read-only 12:58:22 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1924.385884][T14425] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1924.499553][T14438] input: syz1 as /devices/virtual/input/input44 [ 1924.532827][T14440] input: syz1 as /devices/virtual/input/input45 12:58:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1924.605937][T14425] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1924.614674][T14425] EXT4-fs (loop3): failed to parse options in superblock:  [ 1924.625867][T14425] EXT4-fs (loop3): filesystem is read-only [ 1924.638852][T14425] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1924.897245][ T26] audit: type=1326 audit(1560430703.324:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14415 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1924.931756][T14461] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:23 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4d00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1924.963604][T14461] EXT4-fs (loop3): failed to parse options in superblock:  [ 1925.005021][T14467] input: syz1 as /devices/virtual/input/input46 [ 1925.007026][T14461] EXT4-fs (loop3): filesystem is read-only [ 1925.023342][T14461] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x80000, 0x8) [ 1925.070491][ T26] audit: type=1326 audit(1560430703.494:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1925.199385][T14461] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:23 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:23 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r3, 0x0) [ 1925.284989][T14461] EXT4-fs (loop3): failed to parse options in superblock:  [ 1925.317616][T14461] EXT4-fs (loop3): filesystem is read-only 12:58:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x80000, 0x8) 12:58:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1925.343086][T14461] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1925.490074][T14497] input: syz1 as /devices/virtual/input/input47 [ 1925.503635][T14499] input: syz1 as /devices/virtual/input/input48 12:58:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1925.621954][T14503] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1925.672903][T14503] EXT4-fs (loop3): failed to parse options in superblock:  [ 1925.712224][T14503] EXT4-fs (loop3): filesystem is read-only 12:58:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x8) 12:58:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1925.730754][T14503] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1925.830713][T14503] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1925.875005][ T26] audit: type=1326 audit(1560430704.304:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14474 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1925.905431][T14503] EXT4-fs (loop3): failed to parse options in superblock:  [ 1925.915021][T14503] EXT4-fs (loop3): filesystem is read-only 12:58:24 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x5000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1925.931452][T14503] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1925.961549][T14523] input: syz1 as /devices/virtual/input/input49 12:58:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1925.988782][ T26] audit: type=1326 audit(1560430704.414:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14525 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x8) 12:58:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1926.253792][T14535] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1926.308975][T14535] EXT4-fs (loop3): failed to parse options in superblock:  [ 1926.341375][T14535] EXT4-fs (loop3): filesystem is read-only 12:58:24 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) 12:58:24 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1926.357828][T14535] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x8000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1926.486442][T14550] input: syz1 as /devices/virtual/input/input50 [ 1926.539415][T14535] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1926.553331][T14556] input: syz1 as /devices/virtual/input/input51 [ 1926.599641][T14535] EXT4-fs (loop3): failed to parse options in superblock:  [ 1926.647074][T14535] EXT4-fs (loop3): filesystem is read-only 12:58:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x8) 12:58:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x9000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1926.687422][T14535] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1926.788998][ T26] audit: type=1326 audit(1560430705.214:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14525 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x5400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1926.943434][ T26] audit: type=1326 audit(1560430705.374:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14574 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) [ 1927.034840][T14579] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1927.059171][T14586] input: syz1 as /devices/virtual/input/input52 12:58:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1927.097885][T14579] EXT4-fs (loop3): failed to parse options in superblock:  [ 1927.166957][T14579] EXT4-fs (loop3): filesystem is read-only 12:58:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1927.213458][T14579] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:25 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) 12:58:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) 12:58:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x10000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:25 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1927.612404][T14618] input: syz1 as /devices/virtual/input/input54 [ 1927.638795][T14614] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1927.665923][T14614] EXT4-fs (loop3): failed to parse options in superblock:  [ 1927.692584][T14614] EXT4-fs (loop3): filesystem is read-only 12:58:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x11000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1927.710662][T14614] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1927.733864][ T26] audit: type=1326 audit(1560430706.164:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14574 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x5c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x0, 0x0) 12:58:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1927.828937][T14614] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1927.860679][T14614] EXT4-fs (loop3): failed to parse options in superblock:  [ 1927.904090][T14614] EXT4-fs (loop3): filesystem is read-only 12:58:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x12000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1927.938751][ T26] audit: type=1326 audit(1560430706.364:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14635 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1927.994169][T14614] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x13000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:26 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) 12:58:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:26 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x14000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1928.429025][T14661] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1928.451471][T14667] input: syz1 as /devices/virtual/input/input58 [ 1928.461554][T14661] EXT4-fs (loop3): failed to parse options in superblock:  12:58:26 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1928.489499][T14661] EXT4-fs (loop3): filesystem is read-only [ 1928.524892][T14661] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1928.627798][T14677] input: syz1 as /devices/virtual/input/input59 [ 1928.660480][T14661] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1928.730575][ T26] audit: type=1326 audit(1560430707.154:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14635 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1928.741253][T14661] EXT4-fs (loop3): failed to parse options in superblock:  [ 1928.799924][T14661] EXT4-fs (loop3): filesystem is read-only [ 1928.808560][T14661] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:27 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000002480000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1928.950350][T14695] input: syz1 as /devices/virtual/input/input61 [ 1929.121642][T14710] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1929.131149][T14710] EXT4-fs (loop3): failed to parse options in superblock:  [ 1929.138598][T14710] EXT4-fs (loop3): filesystem is read-only [ 1929.144880][T14710] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1929.236120][T14710] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1929.246350][T14710] EXT4-fs (loop3): failed to parse options in superblock:  [ 1929.258838][T14710] EXT4-fs (loop3): filesystem is read-only [ 1929.285101][T14710] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:27 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:27 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) shutdown(r0, 0x0) 12:58:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1929.493432][T14726] input: syz1 as /devices/virtual/input/input64 12:58:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1929.583241][T14733] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1929.626928][T14733] EXT4-fs (loop3): failed to parse options in superblock:  [ 1929.662709][T14733] EXT4-fs (loop3): filesystem is read-only [ 1929.701392][T14733] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1929.765779][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1929.765794][ T26] audit: type=1326 audit(1560430708.194:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14694 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6100}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:28 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:28 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1929.836774][T14733] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1929.886433][T14733] EXT4-fs (loop3): failed to parse options in superblock:  [ 1929.935647][T14733] EXT4-fs (loop3): filesystem is read-only [ 1929.948319][T14761] input: syz1 as /devices/virtual/input/input66 [ 1929.957522][ T26] audit: type=1326 audit(1560430708.384:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14759 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1929.989747][T14733] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:28 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) 12:58:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:28 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) 12:58:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1930.511599][T14786] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1930.530385][T14786] EXT4-fs (loop3): failed to parse options in superblock:  [ 1930.548397][T14786] EXT4-fs (loop3): filesystem is read-only [ 1930.580714][T14786] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:29 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) [ 1930.709969][T14786] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1930.748936][T14786] EXT4-fs (loop3): failed to parse options in superblock:  [ 1930.786602][ T26] audit: type=1326 audit(1560430709.214:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14759 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1930.799505][T14786] EXT4-fs (loop3): filesystem is read-only 12:58:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:29 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1930.861891][T14786] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1930.966565][ T26] audit: type=1326 audit(1560430709.384:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14816 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1931.004012][T14821] input: syz1 as /devices/virtual/input/input68 12:58:29 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1931.395789][T14844] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1931.426627][T14844] EXT4-fs (loop3): failed to parse options in superblock:  12:58:29 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1931.474149][T14844] EXT4-fs (loop3): filesystem is read-only [ 1931.496614][T14844] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1931.618571][T14844] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1931.627849][T14844] EXT4-fs (loop3): failed to parse options in superblock:  [ 1931.635390][T14844] EXT4-fs (loop3): filesystem is read-only [ 1931.673311][T14844] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1931.758458][ T26] audit: type=1326 audit(1560430710.184:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14816 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:30 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:30 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1931.889988][ T26] audit: type=1326 audit(1560430710.314:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14873 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1932.030807][T14889] input: syz1 as /devices/virtual/input/input70 [ 1932.053455][T14885] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1932.115206][T14885] EXT4-fs (loop3): failed to parse options in superblock:  [ 1932.175416][T14885] EXT4-fs (loop3): filesystem is read-only [ 1932.186937][T14885] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:30 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:30 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1932.309451][T14885] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1932.356104][T14885] EXT4-fs (loop3): failed to parse options in superblock:  [ 1932.365042][T14885] EXT4-fs (loop3): filesystem is read-only [ 1932.375758][T14885] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:30 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1932.462472][T14910] input: syz1 as /devices/virtual/input/input71 12:58:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1932.619146][T14926] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1932.642427][T14926] EXT4-fs (loop3): failed to parse options in superblock:  [ 1932.691315][ T26] audit: type=1326 audit(1560430711.124:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14873 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1932.718449][T14926] EXT4-fs (loop3): filesystem is read-only 12:58:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x7400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1932.741170][T14926] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:31 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1932.858109][T14926] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1932.870437][ T26] audit: type=1326 audit(1560430711.294:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14938 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1932.916435][T14926] EXT4-fs (loop3): failed to parse options in superblock:  [ 1932.954001][T14926] EXT4-fs (loop3): filesystem is read-only [ 1932.970213][T14926] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1933.078081][T14953] input: syz1 as /devices/virtual/input/input72 12:58:31 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1933.274152][T14960] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1933.320275][T14960] EXT4-fs (loop3): failed to parse options in superblock:  [ 1933.357593][T14971] input: syz1 as /devices/virtual/input/input73 [ 1933.370847][T14960] EXT4-fs (loop3): filesystem is read-only [ 1933.404924][T14960] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:31 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1933.529697][T14960] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1933.572396][T14960] EXT4-fs (loop3): failed to parse options in superblock:  [ 1933.579845][T14960] EXT4-fs (loop3): filesystem is read-only [ 1933.588783][T14960] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1933.661476][ T26] audit: type=1326 audit(1560430712.094:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14938 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x7c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:32 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1933.852928][ T26] audit: type=1326 audit(1560430712.284:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=14997 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1933.884979][T15001] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1933.905890][T15001] EXT4-fs (loop3): failed to parse options in superblock:  [ 1933.919997][T15001] EXT4-fs (loop3): filesystem is read-only [ 1933.934095][T15001] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1933.994660][T15008] input: syz1 as /devices/virtual/input/input74 [ 1934.036116][T15001] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:32 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1934.077097][T15001] EXT4-fs (loop3): failed to parse options in superblock:  [ 1934.088384][T15001] EXT4-fs (loop3): filesystem is read-only [ 1934.106248][T15001] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1934.288571][T15021] input: syz1 as /devices/virtual/input/input75 [ 1934.382877][T15030] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:32 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40), 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1934.433590][T15030] EXT4-fs (loop3): failed to parse options in superblock:  [ 1934.464911][T15030] EXT4-fs (loop3): filesystem is read-only [ 1934.482694][T15030] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1934.574648][T15030] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1934.590702][T15030] EXT4-fs (loop3): failed to parse options in superblock:  [ 1934.609477][T15030] EXT4-fs (loop3): filesystem is read-only [ 1934.624207][T15030] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x8100}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:33 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1934.771281][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1934.771296][ T26] audit: type=1326 audit(1560430713.204:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15052 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1934.931126][T15060] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1934.938986][T15060] EXT4-fs (loop3): failed to parse options in superblock:  [ 1934.947499][T15060] EXT4-fs (loop3): filesystem is read-only [ 1934.956257][T15060] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:33 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1935.045669][T15060] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1935.060728][T15060] EXT4-fs (loop3): failed to parse options in superblock:  12:58:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1935.087877][T15060] EXT4-fs (loop3): filesystem is read-only [ 1935.105781][T15060] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1935.155232][T15080] input: syz1 as /devices/virtual/input/input77 12:58:33 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1935.368825][T15092] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1935.379983][T15092] EXT4-fs (loop3): failed to parse options in superblock:  [ 1935.389010][T15092] EXT4-fs (loop3): filesystem is read-only [ 1935.397418][T15092] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1935.471912][T15092] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1935.499206][T15092] EXT4-fs (loop3): failed to parse options in superblock:  [ 1935.509056][T15092] EXT4-fs (loop3): filesystem is read-only [ 1935.515272][T15092] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x8400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1935.572305][ T26] audit: type=1326 audit(1560430714.004:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15052 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:34 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1935.684722][ T26] audit: type=1326 audit(1560430714.114:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15109 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1935.781492][T15116] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1935.816467][T15116] EXT4-fs (loop3): failed to parse options in superblock:  [ 1935.842444][T15116] EXT4-fs (loop3): filesystem is read-only [ 1935.877346][T15116] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:34 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1935.976532][T15116] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1936.019784][T15116] EXT4-fs (loop3): failed to parse options in superblock:  [ 1936.050758][T15116] EXT4-fs (loop3): filesystem is read-only 12:58:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1936.068811][T15116] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1936.160029][T15144] input: syz1 as /devices/virtual/input/input79 [ 1936.360061][T15156] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1936.371060][T15156] EXT4-fs (loop3): failed to parse options in superblock:  [ 1936.379292][T15156] EXT4-fs (loop3): filesystem is read-only [ 1936.413697][T15156] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1936.482560][ T26] audit: type=1326 audit(1560430714.914:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15109 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1936.507437][T15156] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1936.522047][T15156] EXT4-fs (loop3): failed to parse options in superblock:  12:58:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x8700}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:34 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1936.529985][T15156] EXT4-fs (loop3): filesystem is read-only [ 1936.554820][T15156] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1936.607655][ T26] audit: type=1326 audit(1560430715.034:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15169 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000003180000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:35 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1936.790026][T15178] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1936.815815][T15178] EXT4-fs (loop3): failed to parse options in superblock:  [ 1936.828626][T15178] EXT4-fs (loop3): filesystem is read-only [ 1936.834999][T15178] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:35 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:58:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1936.967662][T15178] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1936.993830][T15178] EXT4-fs (loop3): failed to parse options in superblock:  12:58:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1937.019026][T15178] EXT4-fs (loop3): filesystem is read-only [ 1937.036973][T15178] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1937.101475][T15200] input: syz1 as /devices/virtual/input/input81 12:58:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1937.399946][ T26] audit: type=1326 audit(1560430715.824:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15169 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x9400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:35 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1937.495185][T15224] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1937.510893][T15224] EXT4-fs (loop3): failed to parse options in superblock:  12:58:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1937.537527][T15224] EXT4-fs (loop3): filesystem is read-only [ 1937.551446][ T26] audit: type=1326 audit(1560430715.984:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15231 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1937.558213][T15224] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:36 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1937.706693][T15224] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1937.726365][T15224] EXT4-fs (loop3): failed to parse options in superblock:  [ 1937.743569][T15224] EXT4-fs (loop3): filesystem is read-only 12:58:36 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1937.777929][T15224] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1937.795184][T15244] input: syz1 as /devices/virtual/input/input82 12:58:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1938.083740][T15263] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1938.116794][T15263] EXT4-fs (loop3): failed to parse options in superblock:  [ 1938.197235][T15263] EXT4-fs (loop3): filesystem is read-only [ 1938.212025][T15263] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1938.300776][T15263] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1938.313026][T15263] EXT4-fs (loop3): failed to parse options in superblock:  [ 1938.331011][T15263] EXT4-fs (loop3): filesystem is read-only [ 1938.337515][T15263] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x9c00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:36 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1938.348233][ T26] audit: type=1326 audit(1560430716.784:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15231 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1938.476255][ T26] audit: type=1326 audit(1560430716.904:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15285 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1938.519680][T15286] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1938.593469][T15286] EXT4-fs (loop3): failed to parse options in superblock:  [ 1938.620781][T15286] EXT4-fs (loop3): filesystem is read-only [ 1938.638508][T15286] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:37 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:37 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1938.729508][T15286] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1938.742065][T15286] EXT4-fs (loop3): failed to parse options in superblock:  [ 1938.749733][T15286] EXT4-fs (loop3): filesystem is read-only [ 1938.770781][T15286] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1938.888049][T15312] input: syz1 as /devices/virtual/input/input84 12:58:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1939.101659][T15329] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1939.131392][T15329] EXT4-fs (loop3): failed to parse options in superblock:  [ 1939.144117][T15329] EXT4-fs (loop3): filesystem is read-only [ 1939.154896][T15329] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1939.278372][ T26] audit: type=1326 audit(1560430717.704:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15285 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x9fff}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000003680000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1939.386030][T15343] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1939.407048][T15343] EXT4-fs (loop3): failed to parse options in superblock:  [ 1939.417300][T15343] EXT4-fs (loop3): filesystem is read-only 12:58:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:37 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1939.435748][T15343] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1939.557492][T15343] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1939.591052][T15343] EXT4-fs (loop3): failed to parse options in superblock:  [ 1939.626546][T15343] EXT4-fs (loop3): filesystem is read-only [ 1939.687384][T15343] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:38 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) 12:58:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:38 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1939.870701][T15374] input: syz1 as /devices/virtual/input/input86 [ 1940.035457][T15383] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1940.051180][T15383] EXT4-fs (loop3): failed to parse options in superblock:  [ 1940.064021][T15383] EXT4-fs (loop3): filesystem is read-only [ 1940.092385][T15383] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1940.172459][T15383] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1940.193623][T15383] EXT4-fs (loop3): failed to parse options in superblock:  [ 1940.202647][T15383] EXT4-fs (loop3): filesystem is read-only [ 1940.208943][T15383] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xa400}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1940.223547][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1940.223562][ T26] audit: type=1326 audit(1560430718.654:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15347 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:38 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1940.366267][ T26] audit: type=1326 audit(1560430718.794:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15401 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1940.468026][T15408] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1940.497148][T15408] EXT4-fs (loop3): failed to parse options in superblock:  [ 1940.517547][T15408] EXT4-fs (loop3): filesystem is read-only [ 1940.542359][T15408] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1940.641506][T15408] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1940.664820][T15408] EXT4-fs (loop3): failed to parse options in superblock:  12:58:39 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) 12:58:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:39 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1940.688574][T15408] EXT4-fs (loop3): filesystem is read-only [ 1940.694945][T15408] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1940.799834][T15428] input: syz1 as /devices/virtual/input/input88 12:58:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1940.974565][T15441] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1941.000079][T15441] EXT4-fs (loop3): failed to parse options in superblock:  [ 1941.008122][T15441] EXT4-fs (loop3): filesystem is read-only [ 1941.014363][T15441] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1941.092682][T15441] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1941.100871][T15441] EXT4-fs (loop3): failed to parse options in superblock:  [ 1941.109600][T15441] EXT4-fs (loop3): filesystem is read-only [ 1941.115799][T15441] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1941.158591][ T26] audit: type=1326 audit(1560430719.584:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15401 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xac00}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1941.282921][T15456] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1941.297610][ T26] audit: type=1326 audit(1560430719.724:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15459 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1941.307262][T15456] EXT4-fs (loop3): failed to parse options in superblock:  12:58:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:39 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1941.332777][T15456] EXT4-fs (loop3): filesystem is read-only [ 1941.356479][T15456] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1941.459739][T15456] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1941.488687][T15456] EXT4-fs (loop3): failed to parse options in superblock:  [ 1941.537835][T15456] EXT4-fs (loop3): filesystem is read-only [ 1941.549959][T15456] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:40 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) 12:58:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:40 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:40 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1941.760368][T15483] input: syz1 as /devices/virtual/input/input89 [ 1941.836082][T15490] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1941.868605][T15490] EXT4-fs (loop3): failed to parse options in superblock:  [ 1941.895507][T15490] EXT4-fs (loop3): filesystem is read-only [ 1941.948316][T15490] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1942.043220][T15490] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1942.060493][T15490] EXT4-fs (loop3): failed to parse options in superblock:  [ 1942.068522][T15490] EXT4-fs (loop3): filesystem is read-only [ 1942.076463][T15490] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1942.093729][ T26] audit: type=1326 audit(1560430720.524:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15459 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xb100}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:40 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:58:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1942.215192][ T26] audit: type=1326 audit(1560430720.644:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15514 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:40 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) [ 1942.314907][T15520] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1942.349036][T15520] EXT4-fs (loop3): failed to parse options in superblock:  [ 1942.357265][T15520] EXT4-fs (loop3): filesystem is read-only [ 1942.408608][T15520] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:41 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) 12:58:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) [ 1942.563325][T15520] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1942.579917][T15520] EXT4-fs (loop3): failed to parse options in superblock:  [ 1942.587503][T15520] EXT4-fs (loop3): filesystem is read-only [ 1942.593888][T15520] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:41 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1942.708768][T15546] input: syz1 as /devices/virtual/input/input90 12:58:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1942.896161][T15560] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1942.922883][T15560] EXT4-fs (loop3): failed to parse options in superblock:  [ 1942.979262][T15560] EXT4-fs (loop3): filesystem is read-only [ 1942.997312][T15560] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1943.014997][ T26] audit: type=1326 audit(1560430721.444:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15514 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:41 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xff9f}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) 12:58:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1943.072894][T15560] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1943.083430][T15560] EXT4-fs (loop3): failed to parse options in superblock:  [ 1943.107009][T15560] EXT4-fs (loop3): filesystem is read-only 12:58:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1943.129872][T15560] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1943.149777][ T26] audit: type=1326 audit(1560430721.574:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15572 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000003e80000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) [ 1943.366738][T15583] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1943.385756][T15583] EXT4-fs (loop3): failed to parse options in superblock:  [ 1943.425439][T15583] EXT4-fs (loop3): filesystem is read-only [ 1943.431696][T15583] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1943.496974][T15583] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1943.523533][T15583] EXT4-fs (loop3): failed to parse options in superblock:  12:58:42 executing program 0: socket$inet6(0xa, 0x80003, 0x87) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:42 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) shutdown(r0, 0x0) 12:58:42 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1943.542004][T15583] EXT4-fs (loop3): filesystem is read-only [ 1943.547957][T15583] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1943.767679][T15608] input: syz1 as /devices/virtual/input/input92 [ 1943.833219][T15612] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1943.885691][T15612] EXT4-fs (loop3): failed to parse options in superblock:  [ 1943.929110][T15612] EXT4-fs (loop3): filesystem is read-only [ 1943.950687][T15612] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1943.959478][ T26] audit: type=1326 audit(1560430722.384:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15572 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:42 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x200000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:42 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) shutdown(r0, 0x0) 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1944.056659][T15612] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1944.084325][T15612] EXT4-fs (loop3): failed to parse options in superblock:  [ 1944.102734][T15632] input: syz1 as /devices/virtual/input/input93 [ 1944.119968][ T26] audit: type=1326 audit(1560430722.544:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15629 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1944.150042][T15612] EXT4-fs (loop3): filesystem is read-only 12:58:42 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000), 0x4) shutdown(r0, 0x0) [ 1944.184818][T15612] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:42 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:42 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 12:58:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:42 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) [ 1944.584915][T15661] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1944.646330][T15661] EXT4-fs (loop3): failed to parse options in superblock:  [ 1944.688012][T15661] EXT4-fs (loop3): filesystem is read-only [ 1944.732361][T15661] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1944.815387][T15661] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1944.830020][T15661] EXT4-fs (loop3): failed to parse options in superblock:  [ 1944.839678][T15661] EXT4-fs (loop3): filesystem is read-only [ 1944.852334][T15661] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:43 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x600000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:43 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000004180000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1945.073254][T15696] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1945.104702][T15696] EXT4-fs (loop3): failed to parse options in superblock:  12:58:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1945.151777][T15696] EXT4-fs (loop3): filesystem is read-only [ 1945.174748][T15696] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1945.294108][T15696] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:43 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) [ 1945.343648][T15696] EXT4-fs (loop3): failed to parse options in superblock:  [ 1945.359209][T15696] EXT4-fs (loop3): filesystem is read-only [ 1945.382243][T15696] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:44 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) 12:58:44 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x806b01}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1945.847405][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1945.847419][ T26] audit: type=1326 audit(1560430724.274:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15690 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1945.970456][ T26] audit: type=1326 audit(1560430724.394:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15761 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1945.972731][T15759] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1946.012800][T15759] EXT4-fs (loop3): failed to parse options in superblock:  12:58:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1946.025453][T15759] EXT4-fs (loop3): filesystem is read-only [ 1946.045688][T15759] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1946.145465][T15759] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1946.216099][T15759] EXT4-fs (loop3): failed to parse options in superblock:  [ 1946.240359][T15759] EXT4-fs (loop3): filesystem is read-only [ 1946.246726][T15759] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:44 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:44 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:58:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:45 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(0xffffffffffffffff, 0x0) [ 1946.544277][T15793] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1946.556115][T15793] EXT4-fs (loop3): failed to parse options in superblock:  [ 1946.565388][T15793] EXT4-fs (loop3): filesystem is read-only [ 1946.583036][T15793] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1946.692508][T15793] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1946.741237][T15793] EXT4-fs (loop3): failed to parse options in superblock:  [ 1946.752579][T15793] EXT4-fs (loop3): filesystem is read-only 12:58:45 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1946.773275][ T26] audit: type=1326 audit(1560430725.204:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15761 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1946.775856][T15793] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1946.886716][ T26] audit: type=1326 audit(1560430725.314:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15817 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1947.062894][T15829] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1947.088266][T15829] EXT4-fs (loop3): failed to parse options in superblock:  [ 1947.129049][T15829] EXT4-fs (loop3): filesystem is read-only [ 1947.151180][T15829] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:45 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1947.245585][T15829] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1947.264412][T15829] EXT4-fs (loop3): failed to parse options in superblock:  [ 1947.282509][T15829] EXT4-fs (loop3): filesystem is read-only [ 1947.302402][T15829] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1947.384353][T15852] input: syz1 as /devices/virtual/input/input102 12:58:45 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:58:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1947.585862][T15858] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1947.670885][T15858] EXT4-fs (loop3): failed to parse options in superblock:  [ 1947.685124][ T26] audit: type=1326 audit(1560430726.114:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15817 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1947.709751][T15858] EXT4-fs (loop3): filesystem is read-only [ 1947.717505][T15858] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:46 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x16b8000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) [ 1947.753030][T15869] input: syz1 as /devices/virtual/input/input103 [ 1947.818091][T15858] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1947.831264][T15858] EXT4-fs (loop3): failed to parse options in superblock:  [ 1947.856694][T15858] EXT4-fs (loop3): filesystem is read-only [ 1947.875983][T15858] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1947.904653][ T26] audit: type=1326 audit(1560430726.334:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15879 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) 12:58:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1948.116852][T15895] input: syz1 as /devices/virtual/input/input104 12:58:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1948.275881][T15903] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:46 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:58:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:46 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) r0 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x201, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r0, 0x8) [ 1948.347904][T15903] EXT4-fs (loop3): failed to parse options in superblock:  [ 1948.370756][T15903] EXT4-fs (loop3): filesystem is read-only [ 1948.383833][T15903] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1948.425581][T15915] input: syz1 as /devices/virtual/input/input105 [ 1948.692073][ T26] audit: type=1326 audit(1560430727.124:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15879 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:47 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r0, &(0x7f0000000040)=""/10, 0xa) [ 1948.855790][T15943] input: syz1 as /devices/virtual/input/input106 12:58:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1948.898951][T15946] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1948.918822][ T26] audit: type=1326 audit(1560430727.344:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15950 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1948.919006][T15946] EXT4-fs (loop3): failed to parse options in superblock:  [ 1948.985804][T15946] EXT4-fs (loop3): filesystem is read-only 12:58:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1949.033075][T15946] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1949.127893][T15946] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1949.141000][T15946] EXT4-fs (loop3): failed to parse options in superblock:  [ 1949.190918][T15946] EXT4-fs (loop3): filesystem is read-only [ 1949.235911][T15946] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1949.247240][T15969] input: syz1 as /devices/virtual/input/input107 12:58:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:47 executing program 2: socket$inet6(0xa, 0x80003, 0x87) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:47 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000004880000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1949.543464][T15984] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1949.570869][T15987] input: syz1 as /devices/virtual/input/input108 [ 1949.597400][T15988] input: syz1 as /devices/virtual/input/input109 [ 1949.599492][T15984] EXT4-fs (loop3): failed to parse options in superblock:  [ 1949.647731][T15984] EXT4-fs (loop3): filesystem is read-only [ 1949.693692][T15984] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1949.713858][ T26] audit: type=1326 audit(1560430728.144:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=15950 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:48 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x40000002}, 0x10) shmctl$IPC_STAT(0x0, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x187bd01f, 0x800000000002, 0x0, 0x800e005b5) shutdown(r0, 0x0) 12:58:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1949.802112][T15984] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1949.855106][T15984] EXT4-fs (loop3): failed to parse options in superblock:  [ 1949.888729][T16004] input: syz1 as /devices/virtual/input/input110 [ 1949.912913][T15984] EXT4-fs (loop3): filesystem is read-only [ 1949.949302][T15984] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(r0, 0x0, &(0x7f0000000040)) recvfrom$inet(r0, 0x0, 0xd85bc68d, 0x2, 0x0, 0x800e0060f) shutdown(r0, 0x0) [ 1949.978405][ T26] audit: type=1326 audit(1560430728.404:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16010 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1950.055971][T16015] input: syz1 as /devices/virtual/input/input111 12:58:48 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:48 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:48 executing program 1: r0 = open(&(0x7f0000000340)='./file0\x00', 0x300, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0xd, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000300010005}) flock(r0, 0x8) [ 1950.353185][T16034] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1950.420706][T16034] EXT4-fs (loop3): failed to parse options in superblock:  [ 1950.436768][T16034] EXT4-fs (loop3): filesystem is read-only [ 1950.467725][T16034] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1950.496520][T16048] input: syz1 as /devices/virtual/input/input112 [ 1950.587480][T16034] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1950.626467][T16034] EXT4-fs (loop3): failed to parse options in superblock:  [ 1950.643452][T16034] EXT4-fs (loop3): filesystem is read-only [ 1950.649671][T16034] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:49 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e008d6) 12:58:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1950.908229][T16066] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1950.927152][T16069] input: syz1 as /devices/virtual/input/input113 [ 1950.948036][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1950.948051][ T26] audit: type=1326 audit(1560430729.374:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16076 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1950.975774][T16066] EXT4-fs (loop3): failed to parse options in superblock:  12:58:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1951.021945][T16066] EXT4-fs (loop3): filesystem is read-only [ 1951.054376][T16066] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1951.152726][T16066] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1951.190247][T16066] EXT4-fs (loop3): failed to parse options in superblock:  [ 1951.218021][T16066] EXT4-fs (loop3): filesystem is read-only [ 1951.241615][T16066] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1951.266883][T16097] input: syz1 as /devices/virtual/input/input114 12:58:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:49 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1951.505547][T16106] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1951.554163][T16106] EXT4-fs (loop3): failed to parse options in superblock:  [ 1951.579977][T16106] EXT4-fs (loop3): filesystem is read-only [ 1951.601119][T16106] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1951.673567][T16106] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1951.684627][T16106] EXT4-fs (loop3): failed to parse options in superblock:  [ 1951.733773][T16106] EXT4-fs (loop3): filesystem is read-only [ 1951.746703][T16106] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1951.748425][ T26] audit: type=1326 audit(1560430730.174:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16076 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:50 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x5000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000380)='./bus\x00', 0x141046, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x6d0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000180)="11dca5155e0bcfee7be070") ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 12:58:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1951.924251][T16132] input: syz1 as /devices/virtual/input/input117 [ 1951.942771][T16138] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1951.951983][ T26] audit: type=1326 audit(1560430730.384:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16135 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1951.983375][T16138] EXT4-fs (loop3): failed to parse options in superblock:  [ 1952.022300][T16138] EXT4-fs (loop3): filesystem is read-only 12:58:50 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="3400000000003c00400046eec695"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x20000000000000f5, &(0x7f0000000000)=[{0x0, 0x0, 0x3}]}, 0x10) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) [ 1952.022321][T16138] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1952.135100][T16138] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1952.165540][T16138] EXT4-fs (loop3): failed to parse options in superblock:  12:58:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1952.201966][T16138] EXT4-fs (loop3): filesystem is read-only [ 1952.217735][T16138] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1952.518783][T16171] input: syz1 as /devices/virtual/input/input120 [ 1952.732118][ T26] audit: type=1326 audit(1560430731.164:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16135 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000004d80000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:51 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1952.869981][T16190] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1952.895104][T16193] input: syz1 as /devices/virtual/input/input122 12:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1952.920078][T16190] EXT4-fs (loop3): failed to parse options in superblock:  [ 1952.972213][ T26] audit: type=1326 audit(1560430731.404:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16196 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1953.017427][T16190] EXT4-fs (loop3): filesystem is read-only [ 1953.057337][T16190] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0x1, 0x0) 12:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1953.222456][T16190] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1953.279021][T16190] EXT4-fs (loop3): failed to parse options in superblock:  [ 1953.295492][T16190] EXT4-fs (loop3): filesystem is read-only 12:58:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1953.346642][T16190] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:51 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1953.436113][T16226] input: syz1 as /devices/virtual/input/input124 12:58:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:51 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) [ 1953.490065][T16228] input: syz1 as /devices/virtual/input/input125 [ 1953.694126][T16240] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1953.719184][T16240] EXT4-fs (loop3): failed to parse options in superblock:  [ 1953.753410][ T26] audit: type=1326 audit(1560430732.184:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16196 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1953.781296][T16240] EXT4-fs (loop3): filesystem is read-only 12:58:52 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x7000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1953.820619][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1953.826620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1953.832702][T16240] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1953.932802][T16254] input: syz1 as /devices/virtual/input/input126 [ 1953.942458][T16240] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1953.989265][ T26] audit: type=1326 audit(1560430732.414:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16256 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1954.020960][T16240] EXT4-fs (loop3): failed to parse options in superblock:  [ 1954.029400][T16253] input: syz1 as /devices/virtual/input/input127 [ 1954.056991][T16240] EXT4-fs (loop3): filesystem is read-only 12:58:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1954.112878][T16240] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:52 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1954.291718][T16271] input: syz1 as /devices/virtual/input/input128 [ 1954.300647][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1954.306565][ C0] protocol 88fb is buggy, dev hsr_slave_1 12:58:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1954.357186][T16276] input: syz1 as /devices/virtual/input/input129 12:58:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1954.489549][T16281] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:58:53 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) [ 1954.539682][T16281] EXT4-fs (loop3): failed to parse options in superblock:  [ 1954.570029][T16281] EXT4-fs (loop3): filesystem is read-only [ 1954.599906][T16281] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1954.648864][T16293] input: syz1 as /devices/virtual/input/input130 [ 1954.659885][T16294] input: syz1 as /devices/virtual/input/input131 [ 1954.751000][T16281] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1954.790054][ T26] audit: type=1326 audit(1560430733.214:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16256 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1954.800192][T16281] EXT4-fs (loop3): failed to parse options in superblock:  12:58:53 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x9000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1954.889339][T16281] EXT4-fs (loop3): filesystem is read-only [ 1954.936930][T16281] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1955.027846][T16309] input: syz1 as /devices/virtual/input/input132 12:58:53 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1955.143941][ T26] audit: type=1326 audit(1560430733.574:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16312 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1955.246554][T16315] input: syz1 as /devices/virtual/input/input133 [ 1955.277196][T16324] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1955.286788][T16324] EXT4-fs (loop3): failed to parse options in superblock:  12:58:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:53 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1955.303580][T16324] EXT4-fs (loop3): filesystem is read-only [ 1955.309761][T16324] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:53 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1955.414715][T16324] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1955.430712][T16324] EXT4-fs (loop3): failed to parse options in superblock:  [ 1955.482844][T16324] EXT4-fs (loop3): filesystem is read-only 12:58:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1955.554656][T16324] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1955.580637][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1955.586501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1955.610149][T16336] input: syz1 as /devices/virtual/input/input135 [ 1955.634483][T16338] input: syz1 as /devices/virtual/input/input134 12:58:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB='r'], 0x1) 12:58:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005180000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1955.927244][ T26] audit: type=1326 audit(1560430734.354:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16312 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:54 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xc000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:54 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xddc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="24000000030307031dfffd944ef20c0020200a0009000100021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) [ 1955.994339][T16358] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1956.008369][T16358] EXT4-fs (loop3): failed to parse options in superblock:  [ 1956.016531][T16358] EXT4-fs (loop3): filesystem is read-only [ 1956.022831][T16358] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1956.093294][T16366] input: syz1 as /devices/virtual/input/input136 [ 1956.102697][T16367] input: syz1 as /devices/virtual/input/input137 [ 1956.134220][ T26] audit: type=1326 audit(1560430734.564:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16368 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1956.231648][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 12:58:54 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:54 executing program 1: 12:58:54 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1956.492174][T16392] input: syz1 as /devices/virtual/input/input139 [ 1956.517986][T16393] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1956.569666][T16393] EXT4-fs (loop3): failed to parse options in superblock:  12:58:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1956.619426][T16393] EXT4-fs (loop3): filesystem is read-only [ 1956.686805][T16393] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1956.803137][T16393] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1956.824835][T16393] EXT4-fs (loop3): failed to parse options in superblock:  [ 1956.853750][T16393] EXT4-fs (loop3): filesystem is read-only [ 1956.870763][T16393] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:55 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x14000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:55 executing program 1: 12:58:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1956.935647][ T26] audit: type=1326 audit(1560430735.364:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16368 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:55 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005380000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1957.069666][T16426] input: syz1 as /devices/virtual/input/input142 12:58:55 executing program 1: 12:58:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1957.161998][ T26] audit: type=1326 audit(1560430735.594:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16431 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1957.251803][T16440] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1957.282201][T16440] EXT4-fs (loop3): failed to parse options in superblock:  12:58:55 executing program 1: 12:58:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1957.303887][T16440] EXT4-fs (loop3): filesystem is read-only [ 1957.318374][T16440] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1957.468457][T16440] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1957.493005][T16455] input: syz1 as /devices/virtual/input/input143 [ 1957.505740][T16457] input: syz1 as /devices/virtual/input/input144 [ 1957.529722][T16440] EXT4-fs (loop3): failed to parse options in superblock:  [ 1957.582841][T16440] EXT4-fs (loop3): filesystem is read-only [ 1957.597816][T16440] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1957.914838][ T26] audit: type=1326 audit(1560430736.344:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16431 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:56 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x15000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:56 executing program 1: syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x100800030000057e) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x01\x00'}) write$P9_RLINK(r1, &(0x7f0000000040)={0x7}, 0x3f8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0xffffffffffffffff, @time={0x0, 0x1c9c380}}) 12:58:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005480000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1958.066733][T16486] input: syz1 as /devices/virtual/input/input145 [ 1958.082621][T16488] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1958.093440][ T26] audit: type=1326 audit(1560430736.524:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16492 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1958.124503][T16488] EXT4-fs (loop3): failed to parse options in superblock:  [ 1958.138308][T16491] input: syz1 as /devices/virtual/input/input146 [ 1958.155399][T16488] EXT4-fs (loop3): filesystem is read-only 12:58:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1958.182436][T16488] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:56 executing program 1: ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000002c0)=0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='/d\xd5HL*\xa4\xdfrG') perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000039c0)=@ipv6_getanyicast={0x14, 0x3e, 0x101, 0x70bd26, 0x25dfdbfc, {}, [""]}, 0x14}}, 0x0) 12:58:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1958.299732][T16488] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1958.307838][T16488] EXT4-fs (loop3): failed to parse options in superblock:  [ 1958.324595][T16488] EXT4-fs (loop3): filesystem is read-only [ 1958.335201][T16488] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:56 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:56 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x9, 0x1, 0x1, 0x10001, 0xe1b6, 0x81, 0x4}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) openat$mixer(0xffffffffffffff9c, 0x0, 0x480000, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$midi(0x0, 0x0, 0x101000) [ 1958.502986][T16516] input: syz1 as /devices/virtual/input/input147 [ 1958.613928][T16525] input: syz1 as /devices/virtual/input/input148 [ 1958.893911][ T26] audit: type=1326 audit(1560430737.324:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16492 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:57 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x16000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:57 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x80000000003ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x4, 0x6d, 0xfd, 0x0, 0xffffffffffffff9c, 0x0, [], 0x0, 0xffffffffffffff9c, 0x0, 0x1}, 0x3c) ptrace(0x10, r1) wait4(0x0, 0x0, 0x0, 0x0) [ 1959.035403][T16544] input: syz1 as /devices/virtual/input/input150 [ 1959.053610][T16552] input: syz1 as /devices/virtual/input/input149 12:58:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1959.076392][ T26] audit: type=1326 audit(1560430737.504:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16553 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1959.124679][T16551] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1959.140143][T16551] EXT4-fs (loop3): failed to parse options in superblock:  [ 1959.150320][T16551] EXT4-fs (loop3): filesystem is read-only 12:58:57 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1959.173314][T16551] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:57 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2000000050000}]}) openat$random(0xffffffffffffff9c, 0x0, 0xa8dfe, 0x0) 12:58:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1959.333409][T16551] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1959.391534][T16551] EXT4-fs (loop3): failed to parse options in superblock:  [ 1959.398908][T16551] EXT4-fs (loop3): filesystem is read-only [ 1959.398932][T16551] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1959.470186][T16573] input: syz1 as /devices/virtual/input/input151 [ 1959.520217][T16587] input: syz1 as /devices/virtual/input/input152 12:58:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1959.868720][ T26] audit: type=1326 audit(1560430738.294:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16553 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:58 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005680000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:58:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1959.999468][ T26] audit: type=1326 audit(1560430738.424:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16617 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1960.021930][T16610] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1960.035606][T16616] input: syz1 as /devices/virtual/input/input154 [ 1960.042034][T16618] input: syz1 as /devices/virtual/input/input155 [ 1960.060765][T16610] EXT4-fs (loop3): failed to parse options in superblock:  [ 1960.068181][T16610] EXT4-fs (loop3): filesystem is read-only [ 1960.122320][T16615] input: syz1 as /devices/virtual/input/input153 12:58:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:58 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1960.166795][T16610] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r2, 0x0) [ 1960.305857][T16610] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1960.337006][T16633] input: syz1 as /devices/virtual/input/input156 12:58:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1960.370719][T16610] EXT4-fs (loop3): failed to parse options in superblock:  [ 1960.416058][T16610] EXT4-fs (loop3): filesystem is read-only [ 1960.450964][T16610] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000005780000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1960.483386][T16642] input: syz1 as /devices/virtual/input/input157 [ 1960.534310][T16645] input: syz1 as /devices/virtual/input/input158 [ 1960.692882][T16655] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1960.747926][T16655] EXT4-fs (loop3): failed to parse options in superblock:  [ 1960.763148][T16655] EXT4-fs (loop3): filesystem is read-only [ 1960.769191][T16655] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1960.799447][ T26] audit: type=1326 audit(1560430739.224:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16617 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:58:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r2, 0x0) 12:58:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:59 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x1d000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:58:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:58:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1960.923451][T16655] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1960.955036][T16655] EXT4-fs (loop3): failed to parse options in superblock:  [ 1960.964285][T16668] input: syz1 as /devices/virtual/input/input160 [ 1960.968188][T16671] input: syz1 as /devices/virtual/input/input159 [ 1960.996326][T16672] input: syz1 as /devices/virtual/input/input161 12:58:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1961.037725][T16655] EXT4-fs (loop3): filesystem is read-only [ 1961.067512][T16655] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:58:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7b") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:58:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r2, 0x0) 12:58:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:58:59 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:58:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1961.312677][T16692] input: syz1 as /devices/virtual/input/input162 [ 1961.333150][T16693] input: syz1 as /devices/virtual/input/input163 12:58:59 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) [ 1961.540083][T16702] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1961.620804][T16702] EXT4-fs (loop3): failed to parse options in superblock:  [ 1961.641288][T16702] EXT4-fs (loop3): filesystem is read-only [ 1961.689808][T16702] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1961.709018][T16718] input: syz1 as /devices/virtual/input/input165 [ 1961.750337][T16716] input: syz1 as /devices/virtual/input/input166 [ 1961.808779][T16702] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1961.853211][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1961.853226][ T26] audit: type=1326 audit(1560430740.284:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16674 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1961.876574][T16702] EXT4-fs (loop3): failed to parse options in superblock:  12:59:00 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x20000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) 12:59:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1961.948791][T16702] EXT4-fs (loop3): filesystem is read-only [ 1961.997048][T16702] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) 12:59:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1962.098223][ T26] audit: type=1326 audit(1560430740.524:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16736 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1962.226758][T16748] input: syz1 as /devices/virtual/input/input169 [ 1962.241295][T16744] input: syz1 as /devices/virtual/input/input168 [ 1962.377802][T16755] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r2, 0x0) 12:59:00 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be0") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1962.440059][T16755] EXT4-fs (loop3): failed to parse options in superblock:  [ 1962.496106][T16755] EXT4-fs (loop3): filesystem is read-only [ 1962.511404][T16755] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1962.618402][T16774] input: syz1 as /devices/virtual/input/input171 12:59:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r2, 0x0) [ 1962.691140][T16776] input: syz1 as /devices/virtual/input/input172 [ 1962.707071][T16755] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1962.752559][T16755] EXT4-fs (loop3): failed to parse options in superblock:  [ 1962.787912][T16755] EXT4-fs (loop3): filesystem is read-only [ 1962.820010][T16755] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1962.882480][ T26] audit: type=1326 audit(1560430741.314:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16736 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:01 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x21000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, 0xffffffffffffffff, 0x0) 12:59:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1963.063231][T16800] input: syz1 as /devices/virtual/input/input174 12:59:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1963.113858][ T26] audit: type=1326 audit(1560430741.544:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16805 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1963.184726][T16811] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1963.245539][T16811] EXT4-fs (loop3): failed to parse options in superblock:  [ 1963.284833][T16811] EXT4-fs (loop3): filesystem is read-only 12:59:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, 0xffffffffffffffff, 0x0) 12:59:01 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1963.321816][T16811] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1963.437508][T16811] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1963.455570][T16829] input: syz1 as /devices/virtual/input/input177 [ 1963.465502][T16811] EXT4-fs (loop3): failed to parse options in superblock:  12:59:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) [ 1963.487467][T16811] EXT4-fs (loop3): filesystem is read-only [ 1963.495808][T16811] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1963.829092][T16849] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1963.862123][T16849] EXT4-fs (loop3): failed to parse options in superblock:  [ 1963.869724][T16849] EXT4-fs (loop3): filesystem is read-only [ 1963.876069][T16849] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1963.895313][ T26] audit: type=1326 audit(1560430742.324:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16805 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:02 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x24000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, 0xffffffffffffffff, 0x0) 12:59:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 1963.938501][T16849] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1963.960371][T16849] EXT4-fs (loop3): failed to parse options in superblock:  [ 1963.980751][T16849] EXT4-fs (loop3): filesystem is read-only [ 1964.009520][T16849] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1964.037467][T16866] input: syz1 as /devices/virtual/input/input182 12:59:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") [ 1964.061199][ T26] audit: type=1326 audit(1560430742.494:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16867 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:02 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x20000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:02 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 1964.323618][T16881] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1964.406673][ T26] audit: type=1326 audit(1560430742.834:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16887 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1964.410237][T16881] EXT4-fs (loop3): failed to parse options in superblock:  [ 1964.489416][T16892] input: syz1 as /devices/virtual/input/input184 [ 1964.558371][T16881] EXT4-fs (loop3): filesystem is read-only [ 1964.571509][T16881] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1964.659684][T16881] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1964.683841][T16881] EXT4-fs (loop3): failed to parse options in superblock:  [ 1964.706712][T16881] EXT4-fs (loop3): filesystem is read-only [ 1964.735459][T16881] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1964.858923][ T26] audit: type=1326 audit(1560430743.284:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16867 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:03 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x25000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 12:59:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000002c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1964.975015][T16912] input: syz1 as /devices/virtual/input/input186 [ 1964.998468][T16915] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1965.016374][T16915] EXT4-fs (loop3): failed to parse options in superblock:  12:59:03 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 12:59:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1965.029956][T16915] EXT4-fs (loop3): filesystem is read-only [ 1965.036972][ T26] audit: type=1326 audit(1560430743.464:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16921 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1965.049708][T16915] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:03 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:03 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) [ 1965.226965][T16915] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1965.291085][T16915] EXT4-fs (loop3): failed to parse options in superblock:  [ 1965.332268][T16937] input: syz1 as /devices/virtual/input/input188 [ 1965.341495][T16915] EXT4-fs (loop3): filesystem is read-only [ 1965.381501][T16915] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:03 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1965.499128][T16942] EXT4-fs (loop0): Unrecognized mount option "" or missing value [ 1965.517937][T16942] EXT4-fs (loop0): failed to parse options in superblock:  [ 1965.541847][T16942] EXT4-fs (loop0): filesystem is read-only [ 1965.603486][T16942] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 35940 [ 1965.662171][T16955] input: syz1 as /devices/virtual/input/input189 12:59:04 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x28000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:04 executing program 1: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 12:59:04 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1965.826469][ T26] audit: type=1326 audit(1560430744.254:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16921 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 1965.966733][T16976] input: syz1 as /devices/virtual/input/input190 [ 1966.000469][T16966] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1966.030349][T16966] EXT4-fs (loop3): failed to parse options in superblock:  [ 1966.038517][T16966] EXT4-fs (loop3): filesystem is read-only [ 1966.044978][T16966] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1966.062974][T16979] input: syz1 as /devices/virtual/input/input191 [ 1966.179930][T16966] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) [ 1966.220157][T16966] EXT4-fs (loop3): failed to parse options in superblock:  12:59:04 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1966.266502][T16966] EXT4-fs (loop3): filesystem is read-only [ 1966.282956][T16966] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:04 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1966.395125][T16999] input: syz1 as /devices/virtual/input/input192 [ 1966.600143][T17011] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1966.625486][T17011] EXT4-fs (loop3): failed to parse options in superblock:  [ 1966.633362][T17011] EXT4-fs (loop3): filesystem is read-only [ 1966.639878][T17011] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1966.721566][T17011] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1966.729517][T17011] EXT4-fs (loop3): failed to parse options in superblock:  [ 1966.742805][T17011] EXT4-fs (loop3): filesystem is read-only [ 1966.748944][T17011] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 12:59:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:59:05 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:05 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:05 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) [ 1966.914465][T17021] input: syz1 as /devices/virtual/input/input193 12:59:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1966.990422][T17031] input: syz1 as /devices/virtual/input/input194 [ 1967.020338][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1967.020353][ T26] audit: type=1326 audit(1560430745.444:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17030 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1967.078864][T17033] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:05 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:59:05 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) [ 1967.176740][T17033] EXT4-fs (loop3): failed to parse options in superblock:  [ 1967.210947][T17033] EXT4-fs (loop3): filesystem is read-only [ 1967.225419][T17033] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1967.279042][T17049] input: syz1 as /devices/virtual/input/input195 [ 1967.345711][T17033] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:05 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) [ 1967.388710][T17033] EXT4-fs (loop3): failed to parse options in superblock:  [ 1967.446983][T17033] EXT4-fs (loop3): filesystem is read-only [ 1967.487885][T17033] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:06 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x2d000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:06 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 12:59:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:06 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000006c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:06 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 1967.815624][ T26] audit: type=1326 audit(1560430746.244:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17030 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1967.937519][T17081] input: syz1 as /devices/virtual/input/input196 [ 1967.945407][T17084] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1967.969007][T17084] EXT4-fs (loop3): failed to parse options in superblock:  [ 1967.977982][T17089] input: syz1 as /devices/virtual/input/input197 12:59:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1967.987534][T17084] EXT4-fs (loop3): filesystem is read-only [ 1968.001910][T17084] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1968.013311][ T26] audit: type=1326 audit(1560430746.444:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17088 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1968.078887][T17090] input: syz1 as /devices/virtual/input/input198 12:59:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000240), 0x4000000000000df, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80000, 0x8) [ 1968.163591][T17084] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1968.238619][T17084] EXT4-fs (loop3): failed to parse options in superblock:  12:59:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1968.283877][T17084] EXT4-fs (loop3): filesystem is read-only [ 1968.311786][T17084] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000007c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:06 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) [ 1968.571040][T17117] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1968.606607][T17117] EXT4-fs (loop3): failed to parse options in superblock:  [ 1968.614469][T17117] EXT4-fs (loop3): filesystem is read-only [ 1968.626775][T17117] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1968.670717][T17124] input: syz1 as /devices/virtual/input/input199 [ 1968.714832][T17117] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1968.749937][T17117] EXT4-fs (loop3): failed to parse options in superblock:  [ 1968.796525][ T26] audit: type=1326 audit(1560430747.224:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17088 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1968.819264][T17117] EXT4-fs (loop3): filesystem is read-only [ 1968.826509][T17117] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:07 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x30000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:07 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r2, 0x0) 12:59:07 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x280, 0x80) 12:59:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1968.975479][T17142] input: syz1 as /devices/virtual/input/input200 [ 1968.992769][ T26] audit: type=1326 audit(1560430747.424:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17141 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1969.023707][T17140] input: syz1 as /devices/virtual/input/input201 [ 1969.126710][T17148] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1969.200801][T17148] EXT4-fs (loop3): failed to parse options in superblock:  [ 1969.208453][T17148] EXT4-fs (loop3): filesystem is read-only [ 1969.222040][T17148] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1969.306289][T17148] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1969.346537][T17148] EXT4-fs (loop3): failed to parse options in superblock:  [ 1969.365891][T17165] EXT4-fs (loop1): Unrecognized mount option "" or missing value [ 1969.384814][T17148] EXT4-fs (loop3): filesystem is read-only 12:59:07 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid', 0x3d, r1}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) shutdown(r0, 0x0) [ 1969.411522][T17165] EXT4-fs (loop1): failed to parse options in superblock:  [ 1969.418968][T17148] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1969.448240][T17165] EXT4-fs (loop1): filesystem is read-only 12:59:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1969.460778][T17165] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 35940 12:59:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1969.727562][T17184] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1969.760802][T17184] EXT4-fs (loop3): failed to parse options in superblock:  [ 1969.773197][ T26] audit: type=1326 audit(1560430748.204:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17141 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1969.796934][T17184] EXT4-fs (loop3): filesystem is read-only 12:59:08 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x34000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) r2 = socket$inet(0x2, 0x800, 0x200) getsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 12:59:08 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r2, 0x0) 12:59:08 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid', 0x3d, r1}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) shutdown(r0, 0x0) 12:59:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1969.862251][T17184] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1969.954045][T17184] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1969.977323][T17184] EXT4-fs (loop3): failed to parse options in superblock:  12:59:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1970.030904][T17184] EXT4-fs (loop3): filesystem is read-only [ 1970.050059][T17208] input: syz1 as /devices/virtual/input/input202 [ 1970.058270][T17184] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1970.108735][ T26] audit: type=1326 audit(1560430748.534:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17211 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:08 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid', 0x3d, r1}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) shutdown(r0, 0x0) 12:59:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1970.351085][T17221] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1970.379643][T17221] EXT4-fs (loop3): failed to parse options in superblock:  [ 1970.414989][T17221] EXT4-fs (loop3): filesystem is read-only [ 1970.434249][T17221] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1970.539546][T17221] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1970.565295][T17221] EXT4-fs (loop3): failed to parse options in superblock:  [ 1970.595457][T17221] EXT4-fs (loop3): filesystem is read-only [ 1970.608152][T17221] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000000bc0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:09 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid', 0x3d, r1}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner', 0x3d, r2}}]}) [ 1970.909870][ T26] audit: type=1326 audit(1560430749.334:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17211 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:09 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x35000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:09 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x200000) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x5, @mcast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x9}, @in6={0xa, 0x4e20, 0xea, @dev={0xfe, 0x80, [], 0x26}, 0x7f}, @in6={0xa, 0x4e21, 0x9, @rand_addr="f3f4f35036c0202b0e8bbae15442f36d", 0x7f}], 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f0000000280)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0xd7a, @remote, 0x7}}}, 0x84) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:59:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:09 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) dup3(r1, r2, 0x0) [ 1971.077801][T17248] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1971.101205][ T26] audit: type=1326 audit(1560430749.534:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17254 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1971.155641][T17248] EXT4-fs (loop3): failed to parse options in superblock:  12:59:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1971.195950][T17248] EXT4-fs (loop3): filesystem is read-only [ 1971.223674][T17265] input: syz1 as /devices/virtual/input/input203 [ 1971.255460][T17248] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1971.326115][T17272] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1971.389764][T17248] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1971.422366][T17248] EXT4-fs (loop3): failed to parse options in superblock:  [ 1971.457067][T17248] EXT4-fs (loop3): filesystem is read-only [ 1971.480454][T17248] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:10 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid', 0x3d, r1}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1971.733482][T17281] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1971.751241][T17281] EXT4-fs (loop3): failed to parse options in superblock:  [ 1971.758948][T17281] EXT4-fs (loop3): filesystem is read-only [ 1971.767284][T17281] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:10 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x200000) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x5, @mcast2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x9}, @in6={0xa, 0x4e20, 0xea, @dev={0xfe, 0x80, [], 0x26}, 0x7f}, @in6={0xa, 0x4e21, 0x9, @rand_addr="f3f4f35036c0202b0e8bbae15442f36d", 0x7f}], 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x23, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x14, 0xc, @ipv6=@ipv4={[], [], @empty}}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f0000000280)=0x4) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e20, 0xd7a, @remote, 0x7}}}, 0x84) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 12:59:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1971.897906][ T26] audit: type=1326 audit(1560430750.324:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17254 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:10 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000000dc0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:10 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) [ 1972.106551][ T26] audit: type=1326 audit(1560430750.534:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17301 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1972.138667][T17304] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 1972.249663][T17310] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1972.299258][T17310] EXT4-fs (loop3): failed to parse options in superblock:  [ 1972.316157][T17310] EXT4-fs (loop3): filesystem is read-only [ 1972.328567][T17310] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1972.337346][T17318] input: syz1 as /devices/virtual/input/input204 [ 1972.454300][T17310] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1972.466474][T17310] EXT4-fs (loop3): failed to parse options in superblock:  [ 1972.476027][T17310] EXT4-fs (loop3): filesystem is read-only [ 1972.486543][T17310] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:11 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1972.706955][T17329] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1972.721141][T17329] EXT4-fs (loop3): failed to parse options in superblock:  [ 1972.728698][T17329] EXT4-fs (loop3): filesystem is read-only [ 1972.739558][T17329] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1972.810769][T17336] EXT4-fs (loop1): Unrecognized mount option "" or missing value [ 1972.846551][T17336] EXT4-fs (loop1): failed to parse options in superblock:  12:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1972.860246][T17336] EXT4-fs (loop1): filesystem is read-only [ 1972.866842][T17336] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 35940 [ 1972.882258][ T26] audit: type=1326 audit(1560430751.314:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17301 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:11 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3d000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1, &(0x7f00000002c0)=""/166, 0xa6}, 0x5}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/58, 0x3a}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/33, 0x21}], 0x6, &(0x7f0000000700)=""/93, 0x5d}, 0x1}, {{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000800)=""/73, 0x49}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000940)=""/16, 0x10}, {&(0x7f0000000980)=""/136, 0x88}, {&(0x7f0000000a40)=""/102, 0x66}, {&(0x7f0000000ac0)=""/227, 0xe3}, {&(0x7f0000000bc0)=""/210, 0xd2}], 0x7, &(0x7f0000000d40)=""/9, 0x9}, 0x7fffffff}, {{&(0x7f0000000d80)=@hci, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/25, 0x19}, {&(0x7f0000000e40)=""/159, 0x9f}, {&(0x7f0000000f00)=""/233, 0xe9}, {&(0x7f0000001000)=""/12, 0xc}], 0x4, &(0x7f0000001080)=""/90, 0x5a}, 0x4}, {{&(0x7f0000001100)=@hci, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/198, 0xc6}], 0x1, &(0x7f00000012c0)=""/93, 0x5d}}, {{&(0x7f0000001340)=@x25, 0x80, &(0x7f0000001940)=[{&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/76, 0x4c}, {&(0x7f00000014c0)=""/97, 0x61}, {&(0x7f0000001540)=""/223, 0xdf}, {&(0x7f0000001640)=""/198, 0xc6}, {&(0x7f0000001740)=""/145, 0x91}, {&(0x7f0000001800)=""/153, 0x99}, {&(0x7f00000018c0)=""/101, 0x65}], 0x8, &(0x7f00000019c0)=""/159, 0x9f}, 0x2}], 0x6, 0x40, &(0x7f0000001c00)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x8000000000}, 0x1c) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) getpeername$inet6(r1, &(0x7f0000001c40)={0xa, 0x0, 0x0, @local}, &(0x7f0000001c80)=0x1c) [ 1973.025097][ T26] audit: type=1326 audit(1560430751.454:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17348 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:11 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) 12:59:11 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1973.224568][T17357] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1973.240769][T17357] EXT4-fs (loop3): failed to parse options in superblock:  [ 1973.261168][T17357] EXT4-fs (loop3): filesystem is read-only [ 1973.327589][T17357] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1973.347350][T17365] input: syz1 as /devices/virtual/input/input205 [ 1973.384560][T17368] input: syz1 as /devices/virtual/input/input206 [ 1973.425962][T17357] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1973.459956][T17368] FAULT_INJECTION: forcing a failure. [ 1973.459956][T17368] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.498756][T17368] CPU: 0 PID: 17368 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1973.499104][T17357] EXT4-fs (loop3): failed to parse options in superblock:  [ 1973.507919][T17368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1973.507928][T17368] Call Trace: [ 1973.507961][T17368] dump_stack+0x172/0x1f0 [ 1973.507989][T17368] should_fail.cold+0xa/0x15 [ 1973.508011][T17368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1973.508037][T17368] ? ___might_sleep+0x163/0x280 [ 1973.508064][T17368] __should_failslab+0x121/0x190 [ 1973.508082][T17368] should_failslab+0x9/0x14 [ 1973.508097][T17368] __kmalloc+0x2d9/0x740 [ 1973.508175][T17368] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 1973.508221][T17368] ? rcu_read_lock_sched_held+0x110/0x130 [ 1973.508239][T17368] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 1973.508261][T17368] tomoyo_realpath_from_path+0xcd/0x7a0 [ 1973.508276][T17368] ? tomoyo_path_number_perm+0x193/0x520 [ 1973.508302][T17368] tomoyo_path_number_perm+0x1dd/0x520 [ 1973.508326][T17368] ? tomoyo_path_number_perm+0x193/0x520 [ 1973.540103][T17357] EXT4-fs (loop3): filesystem is read-only [ 1973.543655][T17368] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1973.543713][T17368] ? __fget+0x384/0x560 [ 1973.543735][T17368] ? ksys_dup3+0x3e0/0x3e0 [ 1973.543751][T17368] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1973.543766][T17368] ? fput_many+0x12c/0x1a0 [ 1973.543786][T17368] tomoyo_file_ioctl+0x23/0x30 [ 1973.543803][T17368] security_file_ioctl+0x77/0xc0 [ 1973.543819][T17368] ksys_ioctl+0x57/0xd0 [ 1973.543843][T17368] __x64_sys_ioctl+0x73/0xb0 [ 1973.556842][T17357] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1973.558124][T17368] do_syscall_64+0xfd/0x680 [ 1973.558149][T17368] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1973.558161][T17368] RIP: 0033:0x4592c9 [ 1973.558177][T17368] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:59:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:12 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1973.558192][T17368] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.701674][T17368] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1973.709644][T17368] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1973.717706][T17368] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1973.725680][T17368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1973.733654][T17368] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1973.785420][T17368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1973.832938][ T26] audit: type=1326 audit(1560430752.264:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17348 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:12 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x3f000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:12 executing program 1 (fault-call:6 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1974.009344][T17386] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1974.033877][ T26] audit: type=1326 audit(1560430752.464:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17390 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1974.081126][T17386] EXT4-fs (loop3): failed to parse options in superblock:  [ 1974.117856][T17386] EXT4-fs (loop3): filesystem is read-only 12:59:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, 0xffffffffffffffff, 0x0) [ 1974.150626][T17386] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1974.188265][T17400] input: syz1 as /devices/virtual/input/input207 [ 1974.245750][T17400] FAULT_INJECTION: forcing a failure. [ 1974.245750][T17400] name failslab, interval 1, probability 0, space 0, times 0 12:59:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1974.301208][T17386] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1974.322250][T17400] CPU: 0 PID: 17400 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1974.331489][T17400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1974.341593][T17400] Call Trace: [ 1974.344902][T17400] dump_stack+0x172/0x1f0 [ 1974.349347][T17400] should_fail.cold+0xa/0x15 [ 1974.353971][T17400] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1974.355032][T17386] EXT4-fs (loop3): failed to parse options in superblock:  [ 1974.359880][T17400] ? ___might_sleep+0x163/0x280 [ 1974.359903][T17400] __should_failslab+0x121/0x190 [ 1974.359926][T17400] should_failslab+0x9/0x14 [ 1974.381497][T17400] __kmalloc+0x2d9/0x740 [ 1974.385762][T17400] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1974.392067][T17400] ? d_absolute_path+0x11b/0x170 [ 1974.397017][T17400] ? __d_path+0x140/0x140 [ 1974.397431][T17386] EXT4-fs (loop3): filesystem is read-only [ 1974.401359][T17400] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1974.401380][T17400] tomoyo_encode2.part.0+0xf5/0x400 [ 1974.401398][T17400] tomoyo_encode+0x2b/0x50 [ 1974.401412][T17400] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 1974.401434][T17400] tomoyo_path_number_perm+0x1dd/0x520 [ 1974.401447][T17400] ? tomoyo_path_number_perm+0x193/0x520 [ 1974.401463][T17400] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1974.401505][T17400] ? __fget+0x384/0x560 [ 1974.430831][T17386] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1974.433792][T17400] ? ksys_dup3+0x3e0/0x3e0 [ 1974.433811][T17400] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1974.433839][T17400] ? fput_many+0x12c/0x1a0 [ 1974.472694][T17400] tomoyo_file_ioctl+0x23/0x30 [ 1974.477479][T17400] security_file_ioctl+0x77/0xc0 [ 1974.482429][T17400] ksys_ioctl+0x57/0xd0 [ 1974.486590][T17400] __x64_sys_ioctl+0x73/0xb0 [ 1974.491205][T17400] do_syscall_64+0xfd/0x680 [ 1974.495721][T17400] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1974.501634][T17400] RIP: 0033:0x4592c9 [ 1974.505533][T17400] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1974.525226][T17400] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1974.533920][T17400] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1974.541900][T17400] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1974.549877][T17400] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1974.557863][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1974.566099][T17400] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1974.591464][T17411] input: syz1 as /devices/virtual/input/input208 12:59:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1974.674397][T17400] ERROR: Out of memory at tomoyo_realpath_from_path. 12:59:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:13 executing program 1 (fault-call:6 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:13 executing program 2: socket$inet6(0xa, 0x80003, 0x87) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1974.824979][ T26] audit: type=1326 audit(1560430753.254:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17390 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:13 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x40000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1974.911722][T17424] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1974.960339][T17424] EXT4-fs (loop3): failed to parse options in superblock:  [ 1975.004882][T17424] EXT4-fs (loop3): filesystem is read-only [ 1975.012330][T17430] input: syz1 as /devices/virtual/input/input209 [ 1975.046306][T17424] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1975.066622][ T26] audit: type=1326 audit(1560430753.494:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17436 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1975.072495][T17438] FAULT_INJECTION: forcing a failure. [ 1975.072495][T17438] name failslab, interval 1, probability 0, space 0, times 0 12:59:13 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:13 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 1975.193691][T17438] CPU: 0 PID: 17438 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1975.202853][T17438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.212922][T17438] Call Trace: [ 1975.216230][T17438] dump_stack+0x172/0x1f0 [ 1975.220579][T17438] should_fail.cold+0xa/0x15 [ 1975.225190][T17438] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1975.231019][T17438] ? ___might_sleep+0x163/0x280 [ 1975.235881][T17438] __should_failslab+0x121/0x190 12:59:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1975.242270][T17438] should_failslab+0x9/0x14 [ 1975.242284][T17438] __kmalloc+0x2d9/0x740 [ 1975.242301][T17438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1975.242314][T17438] ? d_absolute_path+0x11b/0x170 [ 1975.242327][T17438] ? __d_path+0x140/0x140 [ 1975.242344][T17438] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1975.242364][T17438] tomoyo_encode2.part.0+0xf5/0x400 [ 1975.277558][T17438] tomoyo_encode+0x2b/0x50 [ 1975.281987][T17438] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 1975.287644][T17438] tomoyo_path_number_perm+0x1dd/0x520 [ 1975.293557][T17438] ? tomoyo_path_number_perm+0x193/0x520 [ 1975.299215][T17438] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1975.299259][T17438] ? __fget+0x384/0x560 [ 1975.299279][T17438] ? ksys_dup3+0x3e0/0x3e0 [ 1975.314017][T17438] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1975.320270][T17438] ? fput_many+0x12c/0x1a0 [ 1975.324709][T17438] tomoyo_file_ioctl+0x23/0x30 [ 1975.329491][T17438] security_file_ioctl+0x77/0xc0 [ 1975.334528][T17438] ksys_ioctl+0x57/0xd0 [ 1975.338795][T17438] __x64_sys_ioctl+0x73/0xb0 [ 1975.343421][T17438] do_syscall_64+0xfd/0x680 [ 1975.347942][T17438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1975.347956][T17438] RIP: 0033:0x4592c9 [ 1975.347973][T17438] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1975.347982][T17438] RSP: 002b:00007f1d8a5b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1975.348004][T17438] RAX: ffffffffffffffda RBX: 00007f1d8a5b2c90 RCX: 00000000004592c9 [ 1975.377373][T17438] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1975.393754][T17438] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1975.393764][T17438] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5b36d4 [ 1975.393772][T17438] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1975.443163][T17452] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1975.461054][T17452] EXT4-fs (loop3): failed to parse options in superblock:  [ 1975.479095][T17438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1975.490843][T17452] EXT4-fs (loop3): filesystem is read-only [ 1975.497176][T17452] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:14 executing program 2: syz_mount_image$jfs(0x0, &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:14 executing program 1 (fault-call:6 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1975.615888][T17452] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1975.668365][T17452] EXT4-fs (loop3): failed to parse options in superblock:  [ 1975.710913][T17452] EXT4-fs (loop3): filesystem is read-only [ 1975.744968][T17452] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1975.779847][T17472] input: syz1 as /devices/virtual/input/input211 12:59:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1975.846110][T17472] FAULT_INJECTION: forcing a failure. [ 1975.846110][T17472] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.863131][ T26] audit: type=1326 audit(1560430754.294:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17436 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1975.909131][T17472] CPU: 1 PID: 17472 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1975.918302][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.928376][T17472] Call Trace: [ 1975.931695][T17472] dump_stack+0x172/0x1f0 [ 1975.936049][T17472] should_fail.cold+0xa/0x15 [ 1975.940661][T17472] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1975.946515][T17472] ? ___might_sleep+0x163/0x280 [ 1975.951390][T17472] __should_failslab+0x121/0x190 12:59:14 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x44000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1975.956357][T17472] should_failslab+0x9/0x14 [ 1975.960879][T17472] __kmalloc_track_caller+0x2d5/0x740 [ 1975.966267][T17472] ? pointer+0x750/0x750 [ 1975.970584][T17472] ? kasprintf+0xbb/0xf0 [ 1975.974858][T17472] kvasprintf+0xc8/0x170 [ 1975.979361][T17472] ? bust_spinlocks+0xe0/0xe0 [ 1975.984059][T17472] ? find_held_lock+0x35/0x130 [ 1975.988892][T17472] ? debug_check_no_obj_freed+0x211/0x444 [ 1975.994700][T17472] kasprintf+0xbb/0xf0 [ 1975.998754][T17472] ? kvasprintf_const+0x190/0x190 [ 1976.003772][T17472] ? klist_release+0x31c/0x470 [ 1976.008628][T17472] ? input_default_getkeycode+0x520/0x520 [ 1976.014365][T17472] input_devnode+0x4c/0x90 [ 1976.018879][T17472] device_get_devnode+0x170/0x2d0 [ 1976.023946][T17472] devtmpfs_delete_node+0xaa/0x1a0 [ 1976.029057][T17472] ? devtmpfs_create_node+0x250/0x250 [ 1976.034422][T17472] ? lock_downgrade+0x920/0x920 [ 1976.039297][T17472] ? __device_link_free_srcu+0x110/0x110 [ 1976.045005][T17472] ? refcount_dec_and_test_checked+0x1b/0x20 [ 1976.051017][T17472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1976.057266][T17472] ? kobject_put+0x84/0xe0 [ 1976.061682][T17472] ? __device_link_free_srcu+0x110/0x110 [ 1976.067303][T17472] ? klist_children_put+0x4b/0x60 [ 1976.072468][T17472] ? klist_put+0xda/0x180 [ 1976.076799][T17472] device_del+0x89f/0xc30 [ 1976.081130][T17472] ? __device_links_no_driver+0x250/0x250 [ 1976.086848][T17472] ? mark_held_locks+0xa4/0xf0 [ 1976.091621][T17472] ? _raw_spin_unlock_irq+0x28/0x90 [ 1976.097079][T17472] ? __input_unregister_device+0x153/0x490 [ 1976.102903][T17472] ? _raw_spin_unlock_irq+0x28/0x90 12:59:14 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 1976.108095][T17472] cdev_device_del+0x1a/0x90 [ 1976.112717][T17472] evdev_disconnect+0x42/0xc0 [ 1976.117450][T17472] __input_unregister_device+0x1fa/0x490 [ 1976.123105][T17472] input_unregister_device+0xc5/0x110 [ 1976.128528][T17472] uinput_destroy_device+0x1f4/0x250 [ 1976.133828][T17472] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1976.139735][T17472] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1976.146609][T17472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1976.162727][T17472] ? tomoyo_path_number_perm+0x263/0x520 [ 1976.168356][T17472] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1976.174189][T17472] uinput_ioctl+0x4a/0x60 [ 1976.178506][T17472] ? uinput_compat_ioctl+0xb0/0xb0 [ 1976.183625][T17472] do_vfs_ioctl+0xdb6/0x13e0 [ 1976.188206][T17472] ? ioctl_preallocate+0x210/0x210 [ 1976.193304][T17472] ? __fget+0x384/0x560 [ 1976.197487][T17472] ? ksys_dup3+0x3e0/0x3e0 [ 1976.201909][T17472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1976.208255][T17472] ? fput_many+0x12c/0x1a0 [ 1976.212676][T17472] ? tomoyo_file_ioctl+0x23/0x30 [ 1976.217622][T17472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1976.224063][T17472] ? security_file_ioctl+0x8d/0xc0 [ 1976.229187][T17472] ksys_ioctl+0xab/0xd0 [ 1976.233356][T17472] __x64_sys_ioctl+0x73/0xb0 [ 1976.237951][T17472] do_syscall_64+0xfd/0x680 [ 1976.242623][T17472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1976.248504][T17472] RIP: 0033:0x4592c9 [ 1976.252431][T17472] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1976.272308][T17472] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1976.280748][T17472] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1976.288706][T17472] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1976.296663][T17472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1976.304629][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1976.312679][T17472] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1976.325453][ T26] audit: type=1326 audit(1560430754.754:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17485 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:14 executing program 2: syz_mount_image$jfs(0x0, &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:14 executing program 1 (fault-call:6 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1976.469546][T17495] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1976.504929][T17495] EXT4-fs (loop3): failed to parse options in superblock:  [ 1976.567582][T17495] EXT4-fs (loop3): filesystem is read-only [ 1976.609644][T17495] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1976.686608][T17511] input: syz1 as /devices/virtual/input/input213 [ 1976.727304][T17495] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1976.755385][T17495] EXT4-fs (loop3): failed to parse options in superblock:  [ 1976.764566][T17511] FAULT_INJECTION: forcing a failure. [ 1976.764566][T17511] name failslab, interval 1, probability 0, space 0, times 0 12:59:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1976.792794][ T26] audit: type=1326 audit(1560430755.224:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17485 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1976.796747][T17495] EXT4-fs (loop3): filesystem is read-only 12:59:15 executing program 2: syz_mount_image$jfs(0x0, &(0x7f0000000080)='./file0\x00', 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:15 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x45000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1976.860721][T17511] CPU: 1 PID: 17511 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1976.869872][T17511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1976.869879][T17511] Call Trace: [ 1976.869905][T17511] dump_stack+0x172/0x1f0 [ 1976.869939][T17511] should_fail.cold+0xa/0x15 [ 1976.892287][T17511] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1976.898118][T17511] ? ___might_sleep+0x163/0x280 [ 1976.902990][T17511] __should_failslab+0x121/0x190 [ 1976.907939][T17511] should_failslab+0x9/0x14 [ 1976.912444][T17511] kmem_cache_alloc_trace+0x2ce/0x750 [ 1976.912460][T17511] ? kasan_check_write+0x14/0x20 [ 1976.912487][T17511] kobject_uevent_env+0x387/0x101d [ 1976.912502][T17511] ? wait_for_completion+0x440/0x440 [ 1976.912525][T17511] kobject_uevent+0x20/0x26 [ 1976.912546][T17511] device_del+0x74b/0xc30 [ 1976.942058][T17511] ? __device_links_no_driver+0x250/0x250 [ 1976.947796][T17511] ? _raw_spin_unlock_irq+0x28/0x90 [ 1976.953003][T17511] ? __input_unregister_device+0x153/0x490 [ 1976.958822][T17511] ? _raw_spin_unlock_irq+0x28/0x90 [ 1976.962050][T17495] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1976.964033][T17511] cdev_device_del+0x1a/0x90 [ 1976.964054][T17511] evdev_disconnect+0x42/0xc0 [ 1976.964078][T17511] __input_unregister_device+0x1fa/0x490 [ 1976.987276][T17511] input_unregister_device+0xc5/0x110 [ 1976.992659][T17511] uinput_destroy_device+0x1f4/0x250 [ 1976.997967][T17511] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1977.003894][T17511] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1977.003914][T17511] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.003930][T17511] ? tomoyo_path_number_perm+0x263/0x520 [ 1977.003948][T17511] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1977.003978][T17511] uinput_ioctl+0x4a/0x60 [ 1977.003989][T17511] ? uinput_compat_ioctl+0xb0/0xb0 [ 1977.004004][T17511] do_vfs_ioctl+0xdb6/0x13e0 [ 1977.004023][T17511] ? ioctl_preallocate+0x210/0x210 [ 1977.047709][T17511] ? __fget+0x384/0x560 [ 1977.051886][T17511] ? ksys_dup3+0x3e0/0x3e0 [ 1977.056339][T17511] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.062609][T17511] ? fput_many+0x12c/0x1a0 [ 1977.067083][T17511] ? tomoyo_file_ioctl+0x23/0x30 [ 1977.072030][T17511] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.078643][T17511] ? security_file_ioctl+0x8d/0xc0 [ 1977.084826][T17511] ksys_ioctl+0xab/0xd0 [ 1977.089202][T17511] __x64_sys_ioctl+0x73/0xb0 [ 1977.093823][T17511] do_syscall_64+0xfd/0x680 [ 1977.098454][T17511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.104632][T17511] RIP: 0033:0x4592c9 [ 1977.110047][T17511] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.129769][T17511] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1977.138453][T17511] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1977.146442][T17511] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1977.154520][T17511] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1977.162491][T17511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1977.170670][T17511] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1977.203551][ T26] audit: type=1326 audit(1560430755.614:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17527 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:15 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:15 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', 0x0, 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:15 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:15 executing program 1 (fault-call:6 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1977.536222][T17549] input: syz1 as /devices/virtual/input/input214 [ 1977.610293][T17549] FAULT_INJECTION: forcing a failure. [ 1977.610293][T17549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1977.623552][T17549] CPU: 1 PID: 17549 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1977.632677][T17549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1977.642741][T17549] Call Trace: [ 1977.642769][T17549] dump_stack+0x172/0x1f0 [ 1977.642802][T17549] should_fail.cold+0xa/0x15 [ 1977.650563][T17549] ? console_unlock+0x781/0xec0 [ 1977.650587][T17549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1977.650607][T17549] ? __lock_acquire+0x537/0x4af0 [ 1977.670830][T17549] ? debug_smp_processor_id+0x3c/0x2b0 [ 1977.672982][T17555] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1977.676309][T17549] should_fail_alloc_page+0x50/0x60 [ 1977.676334][T17549] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1977.676349][T17549] ? find_held_lock+0x35/0x130 [ 1977.676372][T17549] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1977.689540][T17555] EXT4-fs (loop3): failed to parse options in superblock:  [ 1977.689706][T17549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1977.695724][T17555] EXT4-fs (loop3): filesystem is read-only [ 1977.699824][T17549] cache_grow_begin+0x9d/0x650 [ 1977.699843][T17549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1977.699862][T17549] kmem_cache_alloc_trace+0x67a/0x750 [ 1977.699881][T17549] ? kasan_check_write+0x14/0x20 [ 1977.706152][T17555] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1977.712911][T17549] kobject_uevent_env+0x387/0x101d 12:59:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1977.712930][T17549] ? wait_for_completion+0x440/0x440 [ 1977.712952][T17549] kobject_uevent+0x20/0x26 [ 1977.712969][T17549] device_del+0x74b/0xc30 [ 1977.712988][T17549] ? __device_links_no_driver+0x250/0x250 [ 1977.713010][T17549] ? _raw_spin_unlock_irq+0x28/0x90 [ 1977.784453][T17549] ? __input_unregister_device+0x153/0x490 [ 1977.790261][T17549] ? _raw_spin_unlock_irq+0x28/0x90 [ 1977.795451][T17549] cdev_device_del+0x1a/0x90 [ 1977.800162][T17549] evdev_disconnect+0x42/0xc0 [ 1977.804824][T17549] __input_unregister_device+0x1fa/0x490 [ 1977.810446][T17549] input_unregister_device+0xc5/0x110 [ 1977.815832][T17549] uinput_destroy_device+0x1f4/0x250 [ 1977.821121][T17549] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1977.827018][T17549] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1977.833095][T17549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.839330][T17549] ? tomoyo_path_number_perm+0x263/0x520 [ 1977.844951][T17549] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1977.850761][T17549] uinput_ioctl+0x4a/0x60 [ 1977.855090][T17549] ? uinput_compat_ioctl+0xb0/0xb0 [ 1977.860188][T17549] do_vfs_ioctl+0xdb6/0x13e0 [ 1977.864784][T17549] ? ioctl_preallocate+0x210/0x210 [ 1977.869883][T17549] ? __fget+0x384/0x560 [ 1977.874030][T17549] ? ksys_dup3+0x3e0/0x3e0 [ 1977.878432][T17549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1977.884663][T17549] ? fput_many+0x12c/0x1a0 [ 1977.889069][T17549] ? tomoyo_file_ioctl+0x23/0x30 [ 1977.894003][T17549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1977.900241][T17549] ? security_file_ioctl+0x8d/0xc0 [ 1977.905356][T17549] ksys_ioctl+0xab/0xd0 [ 1977.909611][T17549] __x64_sys_ioctl+0x73/0xb0 [ 1977.914194][T17549] do_syscall_64+0xfd/0x680 [ 1977.918691][T17549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1977.924569][T17549] RIP: 0033:0x4592c9 [ 1977.928450][T17549] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1977.948143][T17549] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1977.956552][T17549] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1977.964525][T17549] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1977.972491][T17549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1977.980480][T17549] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1977.988457][T17549] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:16 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', 0x0, 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1978.002046][ T26] audit: type=1326 audit(1560430756.434:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17527 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:16 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x48000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1978.113740][T17555] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:16 executing program 1 (fault-call:6 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:16 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', 0x0, 0x6, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1978.183552][T17555] EXT4-fs (loop3): failed to parse options in superblock:  [ 1978.238665][ T26] audit: type=1326 audit(1560430756.664:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17575 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:16 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1978.291138][T17555] EXT4-fs (loop3): filesystem is read-only [ 1978.318689][T17555] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1978.351244][T17580] input: syz1 as /devices/virtual/input/input216 [ 1978.428961][T17590] FAULT_INJECTION: forcing a failure. [ 1978.428961][T17590] name failslab, interval 1, probability 0, space 0, times 0 [ 1978.462642][T17590] CPU: 0 PID: 17590 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1978.472580][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1978.482739][T17590] Call Trace: [ 1978.486044][T17590] dump_stack+0x172/0x1f0 [ 1978.490401][T17590] should_fail.cold+0xa/0x15 [ 1978.494994][T17590] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1978.500799][T17590] ? ___might_sleep+0x163/0x280 [ 1978.505673][T17590] __should_failslab+0x121/0x190 [ 1978.510632][T17590] should_failslab+0x9/0x14 [ 1978.515148][T17590] __kmalloc+0x2d9/0x740 [ 1978.519411][T17590] ? kobject_uevent_env+0x387/0x101d [ 1978.524707][T17590] ? rcu_read_lock_sched_held+0x110/0x130 [ 1978.530442][T17590] ? kobject_get_path+0xc4/0x1b0 [ 1978.535393][T17590] kobject_get_path+0xc4/0x1b0 [ 1978.540177][T17590] kobject_uevent_env+0x3ab/0x101d [ 1978.545307][T17590] ? wait_for_completion+0x440/0x440 [ 1978.550712][T17590] kobject_uevent+0x20/0x26 [ 1978.555233][T17590] device_del+0x74b/0xc30 [ 1978.559581][T17590] ? __device_links_no_driver+0x250/0x250 [ 1978.565576][T17590] ? _raw_spin_unlock_irq+0x28/0x90 [ 1978.570884][T17590] ? __input_unregister_device+0x153/0x490 12:59:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1978.576710][T17590] ? _raw_spin_unlock_irq+0x28/0x90 [ 1978.581934][T17590] cdev_device_del+0x1a/0x90 [ 1978.586551][T17590] evdev_disconnect+0x42/0xc0 [ 1978.591244][T17590] __input_unregister_device+0x1fa/0x490 [ 1978.596905][T17590] input_unregister_device+0xc5/0x110 [ 1978.602290][T17590] uinput_destroy_device+0x1f4/0x250 [ 1978.607598][T17590] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1978.613512][T17590] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1978.619604][T17590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1978.626817][T17590] ? tomoyo_path_number_perm+0x263/0x520 [ 1978.632483][T17590] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1978.638322][T17590] uinput_ioctl+0x4a/0x60 [ 1978.642685][T17590] ? uinput_compat_ioctl+0xb0/0xb0 [ 1978.647807][T17590] do_vfs_ioctl+0xdb6/0x13e0 [ 1978.652420][T17590] ? ioctl_preallocate+0x210/0x210 [ 1978.657548][T17590] ? __fget+0x384/0x560 [ 1978.657566][T17590] ? ksys_dup3+0x3e0/0x3e0 [ 1978.657582][T17590] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1978.657597][T17590] ? fput_many+0x12c/0x1a0 [ 1978.657620][T17590] ? tomoyo_file_ioctl+0x23/0x30 [ 1978.657634][T17590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1978.657655][T17590] ? security_file_ioctl+0x8d/0xc0 [ 1978.672446][T17590] ksys_ioctl+0xab/0xd0 [ 1978.672466][T17590] __x64_sys_ioctl+0x73/0xb0 [ 1978.672485][T17590] do_syscall_64+0xfd/0x680 [ 1978.672506][T17590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1978.672517][T17590] RIP: 0033:0x4592c9 [ 1978.672534][T17590] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1978.672541][T17590] RSP: 002b:00007f1d8a591c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1978.672555][T17590] RAX: ffffffffffffffda RBX: 00007f1d8a591c90 RCX: 00000000004592c9 [ 1978.672563][T17590] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1978.672571][T17590] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1978.672586][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5926d4 [ 1978.776352][T17590] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1978.821029][T17602] input: syz1 as /devices/virtual/input/input217 12:59:17 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="bcd17635abfea176f824284d91f01ea2aa1e2a5994fbc180a6a5be1ab68d43b5d19bfd7d514329a58312488ce65691a99bc4436c8758f33236f40b00580f58ad8b8cf5f4aae3f0c001d7de4dd41defd668622f7afe25d5250d307c47eb82dcb9e6b50bc43cd70729181e8062d1d77d142c15b67135dd84199a", 0x79, 0x2}, {&(0x7f0000000140)="7be4203a49ce77a480cd4e3764d8e5984179b5766b59879ae7db6d42f2f647374c5089fc", 0x24}, {&(0x7f0000000180)="e1fbf0dd9d5e53a8f698e13c21330798ab850a3e2b", 0x15, 0x8ec}], 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:17 executing program 1 (fault-call:6 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1979.013891][T17605] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1979.035450][ T26] audit: type=1326 audit(1560430757.464:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17575 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1979.076086][T17605] EXT4-fs (loop3): failed to parse options in superblock:  [ 1979.110737][T17605] EXT4-fs (loop3): filesystem is read-only 12:59:17 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4a000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1979.121124][T17605] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1979.134294][T17621] input: syz1 as /devices/virtual/input/input218 [ 1979.171633][ T26] audit: type=1326 audit(1560430757.604:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17625 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1979.209957][T17628] FAULT_INJECTION: forcing a failure. 12:59:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1979.209957][T17628] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.231632][T17628] CPU: 1 PID: 17628 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1979.243346][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1979.253993][T17628] Call Trace: [ 1979.257281][T17628] dump_stack+0x172/0x1f0 [ 1979.261609][T17628] should_fail.cold+0xa/0x15 [ 1979.266195][T17628] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1979.272090][T17628] ? ___might_sleep+0x163/0x280 [ 1979.276948][T17628] __should_failslab+0x121/0x190 [ 1979.281917][T17628] should_failslab+0x9/0x14 [ 1979.286418][T17628] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1979.292236][T17628] __kmalloc_node_track_caller+0x3d/0x70 [ 1979.297974][T17628] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1979.303424][T17628] __alloc_skb+0x10b/0x5e0 [ 1979.307843][T17628] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1979.312956][T17628] ? kasan_check_read+0x11/0x20 [ 1979.318246][T17628] alloc_uevent_skb+0x83/0x1e2 [ 1979.323029][T17628] kobject_uevent_env+0xaa3/0x101d [ 1979.328241][T17628] ? wait_for_completion+0x440/0x440 [ 1979.333538][T17628] kobject_uevent+0x20/0x26 [ 1979.338425][T17628] device_del+0x74b/0xc30 [ 1979.342861][T17628] ? __device_links_no_driver+0x250/0x250 [ 1979.348584][T17628] ? _raw_spin_unlock_irq+0x28/0x90 [ 1979.355574][T17628] ? __input_unregister_device+0x153/0x490 [ 1979.361392][T17628] ? _raw_spin_unlock_irq+0x28/0x90 [ 1979.366597][T17628] cdev_device_del+0x1a/0x90 [ 1979.371199][T17628] evdev_disconnect+0x42/0xc0 [ 1979.375873][T17628] __input_unregister_device+0x1fa/0x490 [ 1979.381529][T17628] input_unregister_device+0xc5/0x110 [ 1979.386924][T17628] uinput_destroy_device+0x1f4/0x250 [ 1979.392260][T17628] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1979.398169][T17628] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1979.404602][T17628] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1979.410933][T17628] ? tomoyo_path_number_perm+0x263/0x520 [ 1979.417710][T17628] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1979.426415][T17628] uinput_ioctl+0x4a/0x60 [ 1979.430898][T17628] ? uinput_compat_ioctl+0xb0/0xb0 [ 1979.436004][T17628] do_vfs_ioctl+0xdb6/0x13e0 [ 1979.440593][T17628] ? ioctl_preallocate+0x210/0x210 [ 1979.445720][T17628] ? __fget+0x384/0x560 [ 1979.450136][T17628] ? ksys_dup3+0x3e0/0x3e0 [ 1979.454648][T17628] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1979.461060][T17628] ? fput_many+0x12c/0x1a0 [ 1979.465507][T17628] ? tomoyo_file_ioctl+0x23/0x30 [ 1979.470441][T17628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1979.476678][T17628] ? security_file_ioctl+0x8d/0xc0 [ 1979.481797][T17628] ksys_ioctl+0xab/0xd0 [ 1979.485953][T17628] __x64_sys_ioctl+0x73/0xb0 [ 1979.490551][T17628] do_syscall_64+0xfd/0x680 [ 1979.495159][T17628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1979.501045][T17628] RIP: 0033:0x4592c9 [ 1979.505037][T17628] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1979.525631][T17628] RSP: 002b:00007f1d8a5b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1979.534182][T17628] RAX: ffffffffffffffda RBX: 00007f1d8a5b2c90 RCX: 00000000004592c9 [ 1979.542482][T17628] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1979.551008][T17628] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1979.559171][T17628] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5b36d4 [ 1979.567524][T17628] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:18 executing program 1 (fault-call:6 fault-nth:8): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1979.661457][T17605] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1979.700696][T17605] EXT4-fs (loop3): failed to parse options in superblock:  12:59:18 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1979.720962][T17605] EXT4-fs (loop3): filesystem is read-only [ 1979.734228][T17605] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1979.744659][T17636] input: syz1 as /devices/virtual/input/input219 12:59:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1979.932193][T17652] input: syz1 as /devices/virtual/input/input220 [ 1979.951675][T17648] JFS: Cannot determine volume size 12:59:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1979.972588][ T26] audit: type=1326 audit(1560430758.404:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17625 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1980.012729][T17656] FAULT_INJECTION: forcing a failure. 12:59:18 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1980.012729][T17656] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.072661][T17656] CPU: 1 PID: 17656 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1980.081826][T17656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1980.091902][T17656] Call Trace: [ 1980.095220][T17656] dump_stack+0x172/0x1f0 [ 1980.099576][T17656] should_fail.cold+0xa/0x15 [ 1980.104284][T17656] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1980.110123][T17656] ? ___might_sleep+0x163/0x280 [ 1980.114991][T17656] __should_failslab+0x121/0x190 [ 1980.119955][T17656] should_failslab+0x9/0x14 [ 1980.131341][T17656] kmem_cache_alloc_node+0x261/0x700 [ 1980.139120][T17656] ? netlink_has_listeners+0x248/0x3d0 [ 1980.144598][T17656] __alloc_skb+0xd5/0x5e0 [ 1980.148931][T17656] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1980.154056][T17656] ? kasan_check_read+0x11/0x20 [ 1980.159191][T17656] alloc_uevent_skb+0x83/0x1e2 [ 1980.163986][T17656] kobject_uevent_env+0xaa3/0x101d [ 1980.169120][T17656] ? wait_for_completion+0x440/0x440 [ 1980.174437][T17656] kobject_uevent+0x20/0x26 [ 1980.178960][T17656] device_del+0x74b/0xc30 [ 1980.183310][T17656] ? __device_links_no_driver+0x250/0x250 [ 1980.189341][T17656] ? _raw_spin_unlock_irq+0x28/0x90 [ 1980.194672][T17656] ? __input_unregister_device+0x153/0x490 [ 1980.200498][T17656] ? _raw_spin_unlock_irq+0x28/0x90 [ 1980.205725][T17656] cdev_device_del+0x1a/0x90 [ 1980.210373][T17656] evdev_disconnect+0x42/0xc0 [ 1980.215092][T17656] __input_unregister_device+0x1fa/0x490 [ 1980.220749][T17656] input_unregister_device+0xc5/0x110 [ 1980.226234][T17656] uinput_destroy_device+0x1f4/0x250 [ 1980.231541][T17656] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1980.237460][T17656] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1980.243652][T17656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1980.249954][T17656] ? tomoyo_path_number_perm+0x263/0x520 [ 1980.255876][T17656] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1980.261729][T17656] uinput_ioctl+0x4a/0x60 [ 1980.266067][T17656] ? uinput_compat_ioctl+0xb0/0xb0 [ 1980.271200][T17656] do_vfs_ioctl+0xdb6/0x13e0 [ 1980.275809][T17656] ? ioctl_preallocate+0x210/0x210 [ 1980.281055][T17656] ? __fget+0x384/0x560 [ 1980.285422][T17656] ? ksys_dup3+0x3e0/0x3e0 [ 1980.289848][T17656] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1980.296279][T17656] ? fput_many+0x12c/0x1a0 [ 1980.300714][T17656] ? tomoyo_file_ioctl+0x23/0x30 [ 1980.305660][T17656] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1980.311910][T17656] ? security_file_ioctl+0x8d/0xc0 [ 1980.317132][T17656] ksys_ioctl+0xab/0xd0 [ 1980.321293][T17656] __x64_sys_ioctl+0x73/0xb0 [ 1980.325930][T17656] do_syscall_64+0xfd/0x680 [ 1980.332736][T17656] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1980.338643][T17656] RIP: 0033:0x4592c9 [ 1980.342550][T17656] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1980.362210][T17656] RSP: 002b:00007f1d8a5b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1980.370720][T17656] RAX: ffffffffffffffda RBX: 00007f1d8a5b2c90 RCX: 00000000004592c9 [ 1980.378711][T17656] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1980.387217][T17656] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1980.395217][T17656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5b36d4 [ 1980.403393][T17656] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1980.414915][ T26] audit: type=1326 audit(1560430758.844:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17659 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:19 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1980.575441][T17664] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:19 executing program 1 (fault-call:6 fault-nth:9): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1980.625344][T17664] EXT4-fs (loop3): failed to parse options in superblock:  [ 1980.699863][T17664] EXT4-fs (loop3): filesystem is read-only [ 1980.729040][T17664] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1980.788885][T17677] input: syz1 as /devices/virtual/input/input221 [ 1980.829914][T17682] input: syz1 as /devices/virtual/input/input222 [ 1980.896634][ T26] audit: type=1326 audit(1560430759.324:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17659 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1980.920017][T17664] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1980.939459][T17685] JFS: Cannot determine volume size 12:59:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:19 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x4d000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1980.962146][T17677] FAULT_INJECTION: forcing a failure. [ 1980.962146][T17677] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.990379][T17664] EXT4-fs (loop3): failed to parse options in superblock:  [ 1981.026521][T17664] EXT4-fs (loop3): filesystem is read-only [ 1981.038382][T17677] CPU: 0 PID: 17677 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1981.047538][T17677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.057609][T17677] Call Trace: [ 1981.060917][T17677] dump_stack+0x172/0x1f0 [ 1981.065262][T17677] should_fail.cold+0xa/0x15 [ 1981.069950][T17677] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.075786][T17677] ? ___might_sleep+0x163/0x280 [ 1981.080657][T17677] __should_failslab+0x121/0x190 [ 1981.085630][T17677] should_failslab+0x9/0x14 [ 1981.090141][T17677] kmem_cache_alloc+0x2af/0x6f0 [ 1981.095014][T17677] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 1981.100849][T17677] skb_clone+0x154/0x3d0 [ 1981.105114][T17677] netlink_broadcast_filtered+0x86e/0xb20 [ 1981.113341][T17677] netlink_broadcast+0x3a/0x50 [ 1981.118126][T17677] kobject_uevent_env+0xad4/0x101d [ 1981.123246][T17677] ? wait_for_completion+0x440/0x440 [ 1981.128571][T17677] kobject_uevent+0x20/0x26 [ 1981.133084][T17677] device_del+0x74b/0xc30 [ 1981.137518][T17677] ? __device_links_no_driver+0x250/0x250 [ 1981.143253][T17677] ? _raw_spin_unlock_irq+0x28/0x90 [ 1981.148555][T17677] ? __input_unregister_device+0x153/0x490 [ 1981.154565][T17677] ? _raw_spin_unlock_irq+0x28/0x90 [ 1981.159778][T17677] cdev_device_del+0x1a/0x90 [ 1981.164389][T17677] evdev_disconnect+0x42/0xc0 [ 1981.169100][T17677] __input_unregister_device+0x1fa/0x490 [ 1981.174769][T17677] input_unregister_device+0xc5/0x110 [ 1981.180158][T17677] uinput_destroy_device+0x1f4/0x250 [ 1981.185459][T17677] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1981.191369][T17677] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1981.197467][T17677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1981.203899][T17677] ? tomoyo_path_number_perm+0x263/0x520 [ 1981.209571][T17677] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1981.215423][T17677] uinput_ioctl+0x4a/0x60 [ 1981.220025][T17677] ? uinput_compat_ioctl+0xb0/0xb0 [ 1981.225151][T17677] do_vfs_ioctl+0xdb6/0x13e0 [ 1981.229753][T17677] ? ioctl_preallocate+0x210/0x210 [ 1981.234869][T17677] ? __fget+0x384/0x560 [ 1981.241143][T17677] ? ksys_dup3+0x3e0/0x3e0 [ 1981.245569][T17677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1981.252010][T17677] ? fput_many+0x12c/0x1a0 [ 1981.256452][T17677] ? tomoyo_file_ioctl+0x23/0x30 [ 1981.261408][T17677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.267853][T17677] ? security_file_ioctl+0x8d/0xc0 [ 1981.272987][T17677] ksys_ioctl+0xab/0xd0 [ 1981.277526][T17677] __x64_sys_ioctl+0x73/0xb0 [ 1981.282133][T17677] do_syscall_64+0xfd/0x680 [ 1981.286929][T17677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.292917][T17677] RIP: 0033:0x4592c9 [ 1981.296820][T17677] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.317257][T17677] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1981.325867][T17677] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1981.334399][T17677] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1981.343206][T17677] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.351370][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1981.360204][T17677] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1981.368424][T17664] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1981.377164][ T26] audit: type=1326 audit(1560430759.814:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17694 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:19 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:19 executing program 1 (fault-call:6 fault-nth:10): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:20 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 1981.680268][T17705] input: syz1 as /devices/virtual/input/input223 12:59:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1981.758826][T17707] JFS: Cannot determine volume size [ 1981.773825][T17712] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1981.798191][T17712] EXT4-fs (loop3): failed to parse options in superblock:  [ 1981.807504][T17705] FAULT_INJECTION: forcing a failure. [ 1981.807504][T17705] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.818635][T17712] EXT4-fs (loop3): filesystem is read-only [ 1981.857505][T17712] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1981.873375][ T26] audit: type=1326 audit(1560430760.304:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17694 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1981.874557][T17705] CPU: 1 PID: 17705 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1981.904497][T17705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.914561][T17705] Call Trace: [ 1981.917879][T17705] dump_stack+0x172/0x1f0 [ 1981.922407][T17705] should_fail.cold+0xa/0x15 [ 1981.927022][T17705] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.932848][T17705] ? ___might_sleep+0x163/0x280 [ 1981.937717][T17705] __should_failslab+0x121/0x190 [ 1981.942681][T17705] should_failslab+0x9/0x14 [ 1981.947208][T17705] kmem_cache_alloc_trace+0x2ce/0x750 [ 1981.952595][T17705] ? mutex_trylock+0x1e0/0x1e0 [ 1981.957377][T17705] ? kasan_check_write+0x14/0x20 [ 1981.962658][T17705] kobject_uevent_env+0x387/0x101d [ 1981.967806][T17705] ? wait_for_completion+0x440/0x440 [ 1981.973110][T17705] ? software_node_notify+0xfd/0x2ed [ 1981.978459][T17705] kobject_uevent+0x20/0x26 [ 1981.982983][T17705] device_del+0x74b/0xc30 [ 1981.987372][T17705] ? __device_links_no_driver+0x250/0x250 [ 1981.993123][T17705] ? trace_hardirqs_on+0x67/0x220 [ 1981.998274][T17705] __input_unregister_device+0x39e/0x490 [ 1982.003925][T17705] input_unregister_device+0xc5/0x110 [ 1982.009316][T17705] uinput_destroy_device+0x1f4/0x250 [ 1982.014640][T17705] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1982.020729][T17705] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1982.026818][T17705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1982.033172][T17705] ? tomoyo_path_number_perm+0x263/0x520 [ 1982.038825][T17705] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1982.045722][T17705] uinput_ioctl+0x4a/0x60 [ 1982.050080][T17705] ? uinput_compat_ioctl+0xb0/0xb0 [ 1982.055206][T17705] do_vfs_ioctl+0xdb6/0x13e0 [ 1982.059826][T17705] ? ioctl_preallocate+0x210/0x210 [ 1982.064961][T17705] ? __fget+0x384/0x560 [ 1982.069234][T17705] ? ksys_dup3+0x3e0/0x3e0 [ 1982.073696][T17705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1982.079960][T17705] ? fput_many+0x12c/0x1a0 [ 1982.084408][T17705] ? tomoyo_file_ioctl+0x23/0x30 [ 1982.089460][T17705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1982.095812][T17705] ? security_file_ioctl+0x8d/0xc0 [ 1982.100942][T17705] ksys_ioctl+0xab/0xd0 [ 1982.105167][T17705] __x64_sys_ioctl+0x73/0xb0 [ 1982.109870][T17705] do_syscall_64+0xfd/0x680 [ 1982.114394][T17705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1982.120494][T17705] RIP: 0033:0x4592c9 [ 1982.124939][T17705] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1982.147533][T17705] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:59:20 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1982.155969][T17705] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1982.163961][T17705] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1982.171943][T17705] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1982.180011][T17705] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1982.188382][T17705] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:20 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x50000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1982.240684][T17712] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1982.291356][T17712] EXT4-fs (loop3): failed to parse options in superblock:  [ 1982.318273][T17725] JFS: Cannot determine volume size [ 1982.327489][T17712] EXT4-fs (loop3): filesystem is read-only 12:59:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1982.355198][T17712] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1982.376454][ T26] audit: type=1326 audit(1560430760.804:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17730 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:20 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:20 executing program 1 (fault-call:6 fault-nth:11): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:20 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:21 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) [ 1982.595226][T17736] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1982.620312][T17736] EXT4-fs (loop3): failed to parse options in superblock:  [ 1982.659375][T17742] input: syz1 as /devices/virtual/input/input225 [ 1982.665560][T17736] EXT4-fs (loop3): filesystem is read-only [ 1982.694557][T17746] JFS: Cannot determine volume size 12:59:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1982.708186][T17736] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:21 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1982.781479][T17751] FAULT_INJECTION: forcing a failure. [ 1982.781479][T17751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1982.794907][T17751] CPU: 0 PID: 17751 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1982.804379][T17751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1982.814534][T17751] Call Trace: [ 1982.817945][T17751] dump_stack+0x172/0x1f0 [ 1982.822305][T17751] should_fail.cold+0xa/0x15 [ 1982.826945][T17751] ? console_unlock+0x781/0xec0 [ 1982.831813][T17751] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1982.837642][T17751] ? __lock_acquire+0x537/0x4af0 [ 1982.842607][T17751] should_fail_alloc_page+0x50/0x60 [ 1982.847814][T17751] __alloc_pages_nodemask+0x1a1/0x8d0 [ 1982.853225][T17751] ? find_held_lock+0x35/0x130 [ 1982.858445][T17751] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1982.864549][T17751] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1982.870376][T17751] cache_grow_begin+0x9d/0x650 [ 1982.875157][T17751] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1982.881421][T17751] kmem_cache_alloc_trace+0x67a/0x750 [ 1982.886836][T17751] ? mutex_trylock+0x1e0/0x1e0 [ 1982.891793][T17751] ? kasan_check_write+0x14/0x20 [ 1982.896773][T17751] kobject_uevent_env+0x387/0x101d [ 1982.901912][T17751] ? wait_for_completion+0x440/0x440 [ 1982.907223][T17751] ? software_node_notify+0xfd/0x2ed [ 1982.912627][T17751] kobject_uevent+0x20/0x26 [ 1982.917266][T17751] device_del+0x74b/0xc30 [ 1982.921619][T17751] ? __device_links_no_driver+0x250/0x250 [ 1982.927355][T17751] ? trace_hardirqs_on+0x67/0x220 [ 1982.932407][T17751] __input_unregister_device+0x39e/0x490 [ 1982.938069][T17751] input_unregister_device+0xc5/0x110 [ 1982.943463][T17751] uinput_destroy_device+0x1f4/0x250 [ 1982.948766][T17751] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1982.954775][T17751] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1982.961135][T17751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1982.968969][T17751] ? tomoyo_path_number_perm+0x263/0x520 [ 1982.974624][T17751] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1982.980455][T17751] uinput_ioctl+0x4a/0x60 [ 1982.984788][T17751] ? uinput_compat_ioctl+0xb0/0xb0 [ 1982.989912][T17751] do_vfs_ioctl+0xdb6/0x13e0 [ 1982.994522][T17751] ? ioctl_preallocate+0x210/0x210 [ 1982.999633][T17751] ? __fget+0x384/0x560 [ 1983.003798][T17751] ? ksys_dup3+0x3e0/0x3e0 [ 1983.008444][T17751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1983.014692][T17751] ? fput_many+0x12c/0x1a0 [ 1983.019120][T17751] ? tomoyo_file_ioctl+0x23/0x30 [ 1983.024065][T17751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.030424][T17751] ? security_file_ioctl+0x8d/0xc0 [ 1983.035555][T17751] ksys_ioctl+0xab/0xd0 [ 1983.039813][T17751] __x64_sys_ioctl+0x73/0xb0 [ 1983.044435][T17751] do_syscall_64+0xfd/0x680 [ 1983.048955][T17751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.055472][T17751] RIP: 0033:0x4592c9 [ 1983.059463][T17751] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.079271][T17751] RSP: 002b:00007f1d8a591c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.087694][T17751] RAX: ffffffffffffffda RBX: 00007f1d8a591c90 RCX: 00000000004592c9 [ 1983.095957][T17751] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1983.104460][T17751] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1983.113967][T17751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5926d4 [ 1983.121949][T17751] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1983.170087][ T26] audit: type=1326 audit(1560430761.594:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17730 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1983.203068][T17736] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:21 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x54000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1983.244351][T17766] JFS: Cannot determine volume size [ 1983.255551][T17736] EXT4-fs (loop3): failed to parse options in superblock:  12:59:21 executing program 1 (fault-call:6 fault-nth:12): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1983.293442][T17736] EXT4-fs (loop3): filesystem is read-only [ 1983.316505][T17736] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:21 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) 12:59:21 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1983.398545][T17773] input: syz1 as /devices/virtual/input/input226 [ 1983.406527][ T26] audit: type=1326 audit(1560430761.834:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17771 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1983.481278][T17777] FAULT_INJECTION: forcing a failure. [ 1983.481278][T17777] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.527838][T17777] CPU: 1 PID: 17777 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1983.537308][T17777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1983.547400][T17777] Call Trace: [ 1983.550733][T17777] dump_stack+0x172/0x1f0 [ 1983.555136][T17777] should_fail.cold+0xa/0x15 [ 1983.559938][T17777] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1983.565773][T17777] ? ___might_sleep+0x163/0x280 [ 1983.570658][T17777] __should_failslab+0x121/0x190 [ 1983.575638][T17777] should_failslab+0x9/0x14 [ 1983.580186][T17777] __kmalloc+0x2d9/0x740 [ 1983.584459][T17777] ? kobject_uevent_env+0x387/0x101d [ 1983.589786][T17777] ? rcu_read_lock_sched_held+0x110/0x130 [ 1983.595532][T17777] ? kobject_get_path+0xc4/0x1b0 [ 1983.600489][T17777] kobject_get_path+0xc4/0x1b0 [ 1983.605433][T17777] kobject_uevent_env+0x3ab/0x101d [ 1983.610580][T17777] ? wait_for_completion+0x440/0x440 [ 1983.615978][T17777] ? software_node_notify+0xfd/0x2ed [ 1983.621463][T17777] kobject_uevent+0x20/0x26 [ 1983.625986][T17777] device_del+0x74b/0xc30 [ 1983.630352][T17777] ? __device_links_no_driver+0x250/0x250 [ 1983.636189][T17777] ? trace_hardirqs_on+0x67/0x220 [ 1983.641257][T17777] __input_unregister_device+0x39e/0x490 [ 1983.646935][T17777] input_unregister_device+0xc5/0x110 [ 1983.652346][T17777] uinput_destroy_device+0x1f4/0x250 [ 1983.657667][T17777] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1983.663764][T17777] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1983.669962][T17777] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1983.676236][T17777] ? tomoyo_path_number_perm+0x263/0x520 [ 1983.681896][T17777] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1983.687740][T17777] uinput_ioctl+0x4a/0x60 [ 1983.692090][T17777] ? uinput_compat_ioctl+0xb0/0xb0 [ 1983.697477][T17777] do_vfs_ioctl+0xdb6/0x13e0 [ 1983.702083][T17777] ? ioctl_preallocate+0x210/0x210 [ 1983.707299][T17777] ? __fget+0x384/0x560 [ 1983.711617][T17777] ? ksys_dup3+0x3e0/0x3e0 [ 1983.716139][T17777] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1983.722396][T17777] ? fput_many+0x12c/0x1a0 [ 1983.726836][T17777] ? tomoyo_file_ioctl+0x23/0x30 [ 1983.731791][T17777] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1983.738059][T17777] ? security_file_ioctl+0x8d/0xc0 [ 1983.743196][T17777] ksys_ioctl+0xab/0xd0 [ 1983.747384][T17777] __x64_sys_ioctl+0x73/0xb0 [ 1983.752000][T17777] do_syscall_64+0xfd/0x680 [ 1983.756759][T17777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1983.762774][T17777] RIP: 0033:0x4592c9 [ 1983.766685][T17777] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1983.786313][T17777] RSP: 002b:00007f1d8a5b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1983.795113][T17777] RAX: ffffffffffffffda RBX: 00007f1d8a5b2c90 RCX: 00000000004592c9 [ 1983.803370][T17777] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1983.811399][T17777] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1983.819913][T17777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5b36d4 12:59:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1983.827901][T17777] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:22 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) dup3(r1, r2, 0x0) 12:59:22 executing program 1 (fault-call:6 fault-nth:13): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1983.976277][T17784] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:22 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) 12:59:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1984.024390][T17784] EXT4-fs (loop3): failed to parse options in superblock:  [ 1984.063472][T17784] EXT4-fs (loop3): filesystem is read-only [ 1984.095598][T17784] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1984.180793][T17784] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1984.189076][ T26] audit: type=1326 audit(1560430762.614:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17771 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1984.225267][T17784] EXT4-fs (loop3): failed to parse options in superblock:  12:59:22 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x5c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1984.254017][T17784] EXT4-fs (loop3): filesystem is read-only [ 1984.277099][T17784] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:22 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, 0x0) [ 1984.310972][T17801] input: syz1 as /devices/virtual/input/input228 [ 1984.344487][ T26] audit: type=1326 audit(1560430762.774:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17808 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000001ac0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1984.401391][T17801] FAULT_INJECTION: forcing a failure. [ 1984.401391][T17801] name failslab, interval 1, probability 0, space 0, times 0 [ 1984.438919][T17801] CPU: 1 PID: 17801 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1984.448261][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1984.458420][T17801] Call Trace: [ 1984.461738][T17801] dump_stack+0x172/0x1f0 [ 1984.466096][T17801] should_fail.cold+0xa/0x15 [ 1984.470714][T17801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1984.476542][T17801] ? ___might_sleep+0x163/0x280 [ 1984.481416][T17801] __should_failslab+0x121/0x190 [ 1984.486381][T17801] should_failslab+0x9/0x14 [ 1984.490903][T17801] __kmalloc+0x2d9/0x740 [ 1984.495191][T17801] ? kobject_uevent_env+0x387/0x101d [ 1984.500486][T17801] ? rcu_read_lock_sched_held+0x110/0x130 [ 1984.506218][T17801] ? kobject_get_path+0xc4/0x1b0 [ 1984.511184][T17801] kobject_get_path+0xc4/0x1b0 [ 1984.515984][T17801] kobject_uevent_env+0x3ab/0x101d [ 1984.521116][T17801] ? wait_for_completion+0x440/0x440 [ 1984.526421][T17801] ? software_node_notify+0xfd/0x2ed [ 1984.531718][T17801] kobject_uevent+0x20/0x26 [ 1984.536235][T17801] device_del+0x74b/0xc30 [ 1984.540581][T17801] ? __device_links_no_driver+0x250/0x250 [ 1984.546313][T17801] ? trace_hardirqs_on+0x67/0x220 [ 1984.551371][T17801] __input_unregister_device+0x39e/0x490 [ 1984.557167][T17801] input_unregister_device+0xc5/0x110 [ 1984.562653][T17801] uinput_destroy_device+0x1f4/0x250 [ 1984.567995][T17801] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1984.574123][T17801] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1984.580220][T17801] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1984.586483][T17801] ? tomoyo_path_number_perm+0x263/0x520 [ 1984.592159][T17801] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1984.598002][T17801] uinput_ioctl+0x4a/0x60 [ 1984.602346][T17801] ? uinput_compat_ioctl+0xb0/0xb0 [ 1984.607474][T17801] do_vfs_ioctl+0xdb6/0x13e0 [ 1984.612081][T17801] ? ioctl_preallocate+0x210/0x210 [ 1984.617208][T17801] ? __fget+0x384/0x560 [ 1984.621405][T17801] ? ksys_dup3+0x3e0/0x3e0 [ 1984.625834][T17801] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1984.632088][T17801] ? fput_many+0x12c/0x1a0 [ 1984.636624][T17801] ? tomoyo_file_ioctl+0x23/0x30 [ 1984.641574][T17801] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1984.647828][T17801] ? security_file_ioctl+0x8d/0xc0 [ 1984.652972][T17801] ksys_ioctl+0xab/0xd0 [ 1984.657141][T17801] __x64_sys_ioctl+0x73/0xb0 [ 1984.661760][T17801] do_syscall_64+0xfd/0x680 [ 1984.666280][T17801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1984.672178][T17801] RIP: 0033:0x4592c9 [ 1984.676117][T17801] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1984.695735][T17801] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1984.704164][T17801] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1984.712150][T17801] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1984.720133][T17801] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1984.728120][T17801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1984.736200][T17801] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 12:59:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:23 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) 12:59:23 executing program 1 (fault-call:6 fault-nth:14): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:23 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1984.889119][T17819] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1984.920878][T17819] EXT4-fs (loop3): failed to parse options in superblock:  [ 1984.941859][T17819] EXT4-fs (loop3): filesystem is read-only [ 1984.961285][T17819] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1985.025005][T17834] input: syz1 as /devices/virtual/input/input229 12:59:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1985.076114][T17838] JFS: Cannot determine volume size 12:59:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:23 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1985.136241][ T26] audit: type=1326 audit(1560430763.564:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17808 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1985.181420][T17834] FAULT_INJECTION: forcing a failure. [ 1985.181420][T17834] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.235457][T17834] CPU: 0 PID: 17834 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1985.245719][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1985.255809][T17834] Call Trace: [ 1985.255933][T17834] dump_stack+0x172/0x1f0 [ 1985.255959][T17834] should_fail.cold+0xa/0x15 [ 1985.255979][T17834] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1985.256005][T17834] ? ___might_sleep+0x163/0x280 [ 1985.279070][T17834] __should_failslab+0x121/0x190 [ 1985.284129][T17834] should_failslab+0x9/0x14 [ 1985.288729][T17834] kmem_cache_alloc_node+0x261/0x700 [ 1985.294043][T17834] ? netlink_has_listeners+0x248/0x3d0 [ 1985.299530][T17834] __alloc_skb+0xd5/0x5e0 [ 1985.303885][T17834] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1985.309096][T17834] ? kasan_check_read+0x11/0x20 [ 1985.313974][T17834] alloc_uevent_skb+0x83/0x1e2 [ 1985.319501][T17834] kobject_uevent_env+0xaa3/0x101d [ 1985.324754][T17834] ? wait_for_completion+0x440/0x440 [ 1985.330068][T17834] kobject_uevent+0x20/0x26 [ 1985.334605][T17834] device_del+0x74b/0xc30 [ 1985.339050][T17834] ? __device_links_no_driver+0x250/0x250 [ 1985.344791][T17834] ? trace_hardirqs_on+0x67/0x220 [ 1985.349863][T17834] __input_unregister_device+0x39e/0x490 [ 1985.355530][T17834] input_unregister_device+0xc5/0x110 [ 1985.360929][T17834] uinput_destroy_device+0x1f4/0x250 [ 1985.366245][T17834] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1985.372264][T17834] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1985.378356][T17834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1985.385127][T17834] ? tomoyo_path_number_perm+0x263/0x520 [ 1985.390808][T17834] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1985.396688][T17834] uinput_ioctl+0x4a/0x60 [ 1985.401041][T17834] ? uinput_compat_ioctl+0xb0/0xb0 [ 1985.406212][T17834] do_vfs_ioctl+0xdb6/0x13e0 [ 1985.410827][T17834] ? ioctl_preallocate+0x210/0x210 [ 1985.417492][T17834] ? __fget+0x384/0x560 [ 1985.421787][T17834] ? ksys_dup3+0x3e0/0x3e0 [ 1985.426415][T17834] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1985.432696][T17834] ? fput_many+0x12c/0x1a0 [ 1985.437137][T17834] ? tomoyo_file_ioctl+0x23/0x30 [ 1985.442091][T17834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1985.448351][T17834] ? security_file_ioctl+0x8d/0xc0 [ 1985.453863][T17834] ksys_ioctl+0xab/0xd0 [ 1985.458051][T17834] __x64_sys_ioctl+0x73/0xb0 [ 1985.462682][T17834] do_syscall_64+0xfd/0x680 [ 1985.467219][T17834] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1985.473137][T17834] RIP: 0033:0x4592c9 [ 1985.477052][T17834] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1985.496765][T17834] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1985.505198][T17834] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1985.513195][T17834] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1985.521234][T17834] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 12:59:23 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x60000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) [ 1985.529315][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1985.537305][T17834] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1985.578196][ T26] audit: type=1326 audit(1560430764.004:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17843 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1985.712287][T17850] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:24 executing program 1 (fault-call:6 fault-nth:15): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 12:59:24 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) [ 1985.752624][T17853] JFS: Cannot determine volume size [ 1985.780637][T17850] EXT4-fs (loop3): failed to parse options in superblock:  [ 1985.792758][T17850] EXT4-fs (loop3): filesystem is read-only [ 1985.808799][T17850] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1985.839956][T17858] input: syz1 as /devices/virtual/input/input230 12:59:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:24 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1985.961240][T17858] FAULT_INJECTION: forcing a failure. [ 1985.961240][T17858] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.990145][T17858] CPU: 1 PID: 17858 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 1985.999293][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1986.009370][T17858] Call Trace: [ 1986.012684][T17858] dump_stack+0x172/0x1f0 [ 1986.017034][T17858] should_fail.cold+0xa/0x15 [ 1986.021648][T17858] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1986.027473][T17858] ? ___might_sleep+0x163/0x280 [ 1986.032353][T17858] __should_failslab+0x121/0x190 [ 1986.037300][T17858] should_failslab+0x9/0x14 [ 1986.041838][T17858] kmem_cache_alloc_node_trace+0x26d/0x720 [ 1986.047654][T17858] __kmalloc_node_track_caller+0x3d/0x70 [ 1986.053301][T17858] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1986.058808][T17858] __alloc_skb+0x10b/0x5e0 [ 1986.063230][T17858] ? netdev_alloc_frag+0x1b0/0x1b0 [ 1986.068417][T17858] ? kasan_check_read+0x11/0x20 [ 1986.073257][T17858] alloc_uevent_skb+0x83/0x1e2 [ 1986.078111][T17858] kobject_uevent_env+0xaa3/0x101d [ 1986.083340][T17858] ? wait_for_completion+0x440/0x440 [ 1986.088621][T17858] kobject_uevent+0x20/0x26 [ 1986.093111][T17858] device_del+0x74b/0xc30 [ 1986.097452][T17858] ? __device_links_no_driver+0x250/0x250 [ 1986.103246][T17858] ? trace_hardirqs_on+0x67/0x220 [ 1986.108276][T17858] __input_unregister_device+0x39e/0x490 [ 1986.113924][T17858] input_unregister_device+0xc5/0x110 [ 1986.119297][T17858] uinput_destroy_device+0x1f4/0x250 [ 1986.124569][T17858] uinput_ioctl_handler.isra.0+0x159/0x1c50 [ 1986.130451][T17858] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 1986.136704][T17858] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1986.142983][T17858] ? tomoyo_path_number_perm+0x263/0x520 [ 1986.155539][T17858] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1986.161356][T17858] uinput_ioctl+0x4a/0x60 [ 1986.165699][T17858] ? uinput_compat_ioctl+0xb0/0xb0 [ 1986.170823][T17858] do_vfs_ioctl+0xdb6/0x13e0 [ 1986.175414][T17858] ? ioctl_preallocate+0x210/0x210 [ 1986.180540][T17858] ? __fget+0x384/0x560 [ 1986.184694][T17858] ? ksys_dup3+0x3e0/0x3e0 [ 1986.189107][T17858] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1986.195343][T17858] ? fput_many+0x12c/0x1a0 [ 1986.199848][T17858] ? tomoyo_file_ioctl+0x23/0x30 [ 1986.204796][T17858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1986.211068][T17858] ? security_file_ioctl+0x8d/0xc0 [ 1986.216194][T17858] ksys_ioctl+0xab/0xd0 [ 1986.220367][T17858] __x64_sys_ioctl+0x73/0xb0 [ 1986.224949][T17858] do_syscall_64+0xfd/0x680 [ 1986.229457][T17858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1986.235353][T17858] RIP: 0033:0x4592c9 [ 1986.239249][T17858] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:59:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1986.258931][T17858] RSP: 002b:00007f1d8a5d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1986.267612][T17858] RAX: ffffffffffffffda RBX: 00007f1d8a5d3c90 RCX: 00000000004592c9 [ 1986.275597][T17858] RDX: 0000000000000000 RSI: 0000000000005502 RDI: 0000000000000003 [ 1986.283576][T17858] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1986.291624][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d8a5d46d4 [ 1986.299602][T17858] R13: 00000000004c3f11 R14: 00000000004d7b68 R15: 0000000000000006 [ 1986.326278][T17867] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1986.345525][T17871] JFS: Cannot determine volume size [ 1986.370415][T17867] EXT4-fs (loop3): failed to parse options in superblock:  [ 1986.380873][ T26] audit: type=1326 audit(1560430764.804:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17843 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:24 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x61000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:24 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1986.431022][T17867] EXT4-fs (loop3): filesystem is read-only [ 1986.439708][T17867] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:25 executing program 1 (fault-call:6 fault-nth:16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1986.546275][T17867] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1986.559006][ T26] audit: type=1326 audit(1560430764.984:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17881 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1986.562702][T17867] EXT4-fs (loop3): failed to parse options in superblock:  [ 1986.604859][T17884] JFS: Cannot determine volume size 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1986.633825][T17867] EXT4-fs (loop3): filesystem is read-only [ 1986.646694][T17867] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:25 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:25 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x87) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) 12:59:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1986.887691][T17897] JFS: Cannot determine volume size 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1986.966551][T17908] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1987.003325][T17908] EXT4-fs (loop3): failed to parse options in superblock:  12:59:25 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1987.023990][T17908] EXT4-fs (loop3): filesystem is read-only [ 1987.042821][T17908] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1987.146709][T17908] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1987.189122][T17928] JFS: Cannot determine volume size [ 1987.206374][T17908] EXT4-fs (loop3): failed to parse options in superblock:  [ 1987.215268][T17908] EXT4-fs (loop3): filesystem is read-only [ 1987.221391][T17908] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1987.334824][ T26] audit: type=1326 audit(1560430765.764:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17881 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:25 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:25 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x64000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40030000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1987.498722][T17937] JFS: Cannot determine volume size [ 1987.505750][T17941] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1987.553469][T17944] input: syz1 as /devices/virtual/input/input231 [ 1987.583015][ T26] audit: type=1326 audit(1560430766.014:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17946 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1987.621327][T17941] EXT4-fs (loop3): failed to parse options in superblock:  [ 1987.628702][T17941] EXT4-fs (loop3): filesystem is read-only 12:59:26 executing program 0: socket$inet6(0xa, 0x80003, 0x87) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:26 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1987.651118][T17941] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x2) [ 1987.746528][T17941] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1987.770786][T17941] EXT4-fs (loop3): failed to parse options in superblock:  12:59:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1987.797445][T17941] EXT4-fs (loop3): filesystem is read-only [ 1987.828229][T17941] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1987.881458][T17958] input: syz1 as /devices/virtual/input/input232 [ 1987.911771][T17955] JFS: Cannot determine volume size 12:59:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1987.932728][T17960] input: syz1 as /devices/virtual/input/input233 12:59:26 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1988.149088][T17972] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1988.200751][T17972] EXT4-fs (loop3): failed to parse options in superblock:  [ 1988.206870][T17975] JFS: Cannot determine volume size [ 1988.210641][T17972] EXT4-fs (loop3): filesystem is read-only [ 1988.222549][T17972] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1988.330086][T17972] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1988.341259][T17972] EXT4-fs (loop3): failed to parse options in superblock:  [ 1988.351045][T17972] EXT4-fs (loop3): filesystem is read-only [ 1988.363807][T17972] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1988.380130][ T26] audit: type=1326 audit(1560430766.804:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17946 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:26 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x6c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x10) 12:59:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:26 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1988.503909][T17987] input: syz1 as /devices/virtual/input/input235 [ 1988.521851][T17988] input: syz1 as /devices/virtual/input/input236 12:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1988.538357][ T26] audit: type=1326 audit(1560430766.964:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17991 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1988.562173][T17986] JFS: Cannot determine volume size [ 1988.573434][T17986] jfs: Unrecognized mount option "fsuuid=e" or missing value [ 1988.664593][T17997] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1988.695082][T17997] EXT4-fs (loop3): failed to parse options in superblock:  12:59:27 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1988.715367][T17997] EXT4-fs (loop3): filesystem is read-only [ 1988.734957][T17994] input: syz1 as /devices/virtual/input/input237 [ 1988.757002][T17997] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4b33) [ 1988.876084][T17997] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1988.918569][T17997] EXT4-fs (loop3): failed to parse options in superblock:  [ 1988.968588][T18012] JFS: Cannot determine volume size [ 1988.976713][T17997] EXT4-fs (loop3): filesystem is read-only [ 1988.990030][T18016] input: syz1 as /devices/virtual/input/input238 [ 1988.996520][T17997] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1989.009366][T18017] input: syz1 as /devices/virtual/input/input239 [ 1989.019362][T18012] jfs: Unrecognized mount option "fsuuid=e" or missing value [ 1989.167504][T18020] input: syz1 as /devices/virtual/input/input240 [ 1989.327912][ T26] audit: type=1326 audit(1560430767.754:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=17991 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x74000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:27 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4c00) [ 1989.467187][T18032] input: syz1 as /devices/virtual/input/input241 [ 1989.496781][T18034] input: syz1 as /devices/virtual/input/input242 12:59:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1989.514798][T18037] JFS: Cannot determine volume size [ 1989.520841][T18035] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1989.531426][ T26] audit: type=1326 audit(1560430767.964:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18040 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1989.578698][T18035] EXT4-fs (loop3): failed to parse options in superblock:  [ 1989.588582][T18037] jfs: Unrecognized mount option "fsuuid=e" or missing value [ 1989.608897][T18035] EXT4-fs (loop3): filesystem is read-only [ 1989.623591][T18045] input: syz1 as /devices/virtual/input/input243 [ 1989.627941][T18035] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:28 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask'}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:28 executing program 0: socket$inet6(0xa, 0x0, 0x87) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x4c01) [ 1989.742373][T18035] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1989.777872][T18035] EXT4-fs (loop3): failed to parse options in superblock:  12:59:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1989.829100][T18035] EXT4-fs (loop3): filesystem is read-only [ 1989.852672][T18035] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1989.873549][T18060] JFS: Cannot determine volume size [ 1989.903709][T18063] input: syz1 as /devices/virtual/input/input244 [ 1989.918867][T18064] input: syz1 as /devices/virtual/input/input245 [ 1990.052346][T18070] input: syz1 as /devices/virtual/input/input246 [ 1990.313019][ T26] audit: type=1326 audit(1560430768.744:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18040 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:28 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x7c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:28 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:28 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask'}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:28 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5411) [ 1990.440032][T18083] JFS: Cannot determine volume size [ 1990.450449][T18086] input: syz1 as /devices/virtual/input/input247 [ 1990.474989][T18091] input: syz1 as /devices/virtual/input/input248 12:59:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1990.482879][T18080] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1990.498354][ T26] audit: type=1326 audit(1560430768.924:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18090 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1990.514656][T18080] EXT4-fs (loop3): failed to parse options in superblock:  12:59:29 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask'}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1990.570278][T18080] EXT4-fs (loop3): filesystem is read-only [ 1990.595929][T18080] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1990.615612][T18099] input: syz1 as /devices/virtual/input/input249 12:59:29 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1990.696665][T18080] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5421) 12:59:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1990.759285][T18080] EXT4-fs (loop3): failed to parse options in superblock:  [ 1990.797533][T18080] EXT4-fs (loop3): filesystem is read-only [ 1990.798948][T18107] JFS: Cannot determine volume size [ 1990.827037][T18080] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:29 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1990.938332][T18120] input: syz1 as /devices/virtual/input/input250 [ 1991.082841][T18128] input: syz1 as /devices/virtual/input/input251 [ 1991.291770][ T26] audit: type=1326 audit(1560430769.724:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18090 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:29 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:29 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x81000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5450) 12:59:29 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1991.450189][T18146] input: syz1 as /devices/virtual/input/input252 [ 1991.483758][T18143] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1991.496826][ T26] audit: type=1326 audit(1560430769.924:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18151 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1991.526829][T18143] EXT4-fs (loop3): failed to parse options in superblock:  12:59:30 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1991.552157][T18143] EXT4-fs (loop3): filesystem is read-only [ 1991.577793][T18143] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:30 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1991.686765][T18143] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5451) [ 1991.758087][T18143] EXT4-fs (loop3): failed to parse options in superblock:  [ 1991.796491][T18143] EXT4-fs (loop3): filesystem is read-only 12:59:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:30 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1991.865623][T18143] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1991.887695][T18176] input: syz1 as /devices/virtual/input/input254 12:59:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000024c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:30 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1992.051238][T18179] input: syz1 as /devices/virtual/input/input255 [ 1992.058012][T18181] JFS: Cannot determine volume size [ 1992.126639][T18189] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1992.168252][T18189] EXT4-fs (loop3): failed to parse options in superblock:  [ 1992.198893][T18189] EXT4-fs (loop3): filesystem is read-only [ 1992.214802][T18189] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1992.279208][ T26] audit: type=1326 audit(1560430770.704:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18151 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:30 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x84000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:30 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5452) 12:59:30 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1992.338996][T18189] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1992.350110][T18189] EXT4-fs (loop3): failed to parse options in superblock:  [ 1992.440929][T18189] EXT4-fs (loop3): filesystem is read-only [ 1992.448054][T18189] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1992.464382][T18208] input: syz1 as /devices/virtual/input/input257 [ 1992.466673][T18207] JFS: Cannot determine volume size 12:59:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:31 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:31 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1992.643821][T18220] input: syz1 as /devices/virtual/input/input259 12:59:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1992.769864][T18229] JFS: Cannot determine volume size 12:59:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5460) 12:59:31 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1992.804777][T18235] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1992.842355][T18235] EXT4-fs (loop3): failed to parse options in superblock:  [ 1992.887488][T18235] EXT4-fs (loop3): filesystem is read-only [ 1992.910715][T18235] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1992.968133][T18242] input: syz1 as /devices/virtual/input/input261 [ 1993.035663][T18235] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1993.060407][T18235] EXT4-fs (loop3): failed to parse options in superblock:  [ 1993.069050][T18235] EXT4-fs (loop3): filesystem is read-only [ 1993.078328][T18248] input: syz1 as /devices/virtual/input/input263 [ 1993.097059][T18235] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1993.309649][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1993.309663][ T26] audit: type=1326 audit(1560430771.734:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18214 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:31 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x87000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:31 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}]}) 12:59:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:31 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5501) 12:59:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1993.505260][T18267] JFS: Cannot determine volume size [ 1993.512467][T18259] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1993.521127][T18259] EXT4-fs (loop3): failed to parse options in superblock:  [ 1993.529453][ T26] audit: type=1326 audit(1560430771.954:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18272 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1993.552104][T18259] EXT4-fs (loop3): filesystem is read-only [ 1993.569909][T18259] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:32 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}]}) 12:59:32 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1993.681649][T18285] input: syz1 as /devices/virtual/input/input266 [ 1993.709018][T18259] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1993.731410][T18259] EXT4-fs (loop3): failed to parse options in superblock:  [ 1993.757784][T18259] EXT4-fs (loop3): filesystem is read-only [ 1993.770821][T18259] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5503) [ 1993.826835][T18289] JFS: Cannot determine volume size 12:59:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1994.002352][T18305] input: syz1 as /devices/virtual/input/input268 [ 1994.032673][T18304] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1994.040998][T18304] EXT4-fs (loop3): failed to parse options in superblock:  [ 1994.050005][T18304] EXT4-fs (loop3): filesystem is read-only [ 1994.057656][T18304] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1994.154268][T18310] input: syz1 as /devices/virtual/input/input269 [ 1994.161705][T18304] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1994.185230][T18304] EXT4-fs (loop3): failed to parse options in superblock:  [ 1994.227475][T18304] EXT4-fs (loop3): filesystem is read-only [ 1994.250774][T18304] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1994.319556][ T26] audit: type=1326 audit(1560430772.744:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18272 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:32 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x94000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:32 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:32 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}]}) 12:59:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5504) 12:59:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000028c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 1994.440810][T18322] input: syz1 as /devices/virtual/input/input270 [ 1994.485674][T18319] JFS: Cannot determine volume size [ 1994.491228][T18320] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1994.506637][T18330] input: syz1 as /devices/virtual/input/input271 [ 1994.522282][T18320] EXT4-fs (loop3): failed to parse options in superblock:  12:59:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1994.529828][ T26] audit: type=1326 audit(1560430772.954:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18329 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1994.535976][T18320] EXT4-fs (loop3): filesystem is read-only 12:59:33 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_eq={'fowner'}}]}) [ 1994.630853][T18320] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:33 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1994.684362][T18320] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1994.692580][T18320] EXT4-fs (loop3): failed to parse options in superblock:  [ 1994.702278][T18320] EXT4-fs (loop3): filesystem is read-only [ 1994.720968][T18320] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5505) 12:59:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1994.850975][T18345] input: syz1 as /devices/virtual/input/input273 [ 1994.865752][T18343] JFS: Cannot determine volume size [ 1994.902070][T18355] input: syz1 as /devices/virtual/input/input274 [ 1994.941770][T18352] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1994.961071][T18352] EXT4-fs (loop3): failed to parse options in superblock:  [ 1994.977058][T18352] EXT4-fs (loop3): filesystem is read-only [ 1994.985713][T18359] input: syz1 as /devices/virtual/input/input275 [ 1994.993149][T18352] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1995.111407][T18352] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1995.131065][T18352] EXT4-fs (loop3): failed to parse options in superblock:  [ 1995.150618][T18352] EXT4-fs (loop3): filesystem is read-only [ 1995.156484][T18352] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1995.309245][ T26] audit: type=1326 audit(1560430773.734:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18329 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:33 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_eq={'fowner'}}]}) 12:59:33 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x9c000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:33 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5506) 12:59:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1995.442082][T18376] input: syz1 as /devices/virtual/input/input276 [ 1995.463739][T18374] input: syz1 as /devices/virtual/input/input277 [ 1995.471174][T18370] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1995.477858][T18375] JFS: Cannot determine volume size 12:59:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1995.502715][T18370] EXT4-fs (loop3): failed to parse options in superblock:  [ 1995.516120][ T26] audit: type=1326 audit(1560430773.944:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18378 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1995.531896][T18370] EXT4-fs (loop3): filesystem is read-only 12:59:34 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_eq={'fowner'}}]}) 12:59:34 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1995.566533][T18370] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1995.595000][T18385] input: syz1 as /devices/virtual/input/input278 [ 1995.665303][T18370] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1995.692945][T18370] EXT4-fs (loop3): failed to parse options in superblock:  12:59:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5508) [ 1995.721473][T18391] JFS: Cannot determine volume size [ 1995.732593][T18370] EXT4-fs (loop3): filesystem is read-only [ 1995.752483][T18397] input: syz1 as /devices/virtual/input/input279 12:59:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1995.769425][T18370] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:34 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1995.869200][T18400] input: syz1 as /devices/virtual/input/input280 [ 1995.984684][T18408] JFS: Cannot determine volume size [ 1995.995091][T18412] input: syz1 as /devices/virtual/input/input281 [ 1996.002158][T18407] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1996.011698][T18407] EXT4-fs (loop3): failed to parse options in superblock:  [ 1996.020947][T18407] EXT4-fs (loop3): filesystem is read-only [ 1996.026988][T18407] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1996.125128][T18407] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1996.164565][T18407] EXT4-fs (loop3): failed to parse options in superblock:  [ 1996.188195][T18407] EXT4-fs (loop3): filesystem is read-only [ 1996.200662][T18407] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1996.305496][ T26] audit: type=1326 audit(1560430774.734:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18378 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:34 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xa4000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:34 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x550b) 12:59:34 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1996.416174][T18417] input: syz1 as /devices/virtual/input/input282 [ 1996.445983][T18421] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1996.487116][ T26] audit: type=1326 audit(1560430774.914:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18428 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1996.490086][T18426] JFS: Cannot determine volume size [ 1996.513754][T18421] EXT4-fs (loop3): failed to parse options in superblock:  12:59:35 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1996.551682][T18421] EXT4-fs (loop3): filesystem is read-only [ 1996.566373][T18434] input: syz1 as /devices/virtual/input/input284 [ 1996.587370][T18421] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:35 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5510) [ 1996.690683][T18421] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1996.713078][T18421] EXT4-fs (loop3): failed to parse options in superblock:  [ 1996.753012][T18421] EXT4-fs (loop3): filesystem is read-only [ 1996.797450][T18421] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1996.855326][T18449] JFS: Cannot determine volume size [ 1996.867242][T18451] input: syz1 as /devices/virtual/input/input286 12:59:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1996.994723][T18458] input: syz1 as /devices/virtual/input/input287 [ 1997.286117][ T26] audit: type=1326 audit(1560430775.714:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18428 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:35 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:35 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xac000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:35 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c000000002dc0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x6364) [ 1997.403981][T18470] input: syz1 as /devices/virtual/input/input288 [ 1997.422109][T18471] JFS: Cannot determine volume size [ 1997.432138][T18466] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:35 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1997.457049][ T26] audit: type=1326 audit(1560430775.884:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18478 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 1997.464440][T18466] EXT4-fs (loop3): failed to parse options in superblock:  12:59:36 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:36 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1997.540727][T18466] EXT4-fs (loop3): filesystem is read-only [ 1997.546701][T18466] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1997.609329][T18480] input: syz1 as /devices/virtual/input/input290 [ 1997.641067][T18466] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1997.664224][T18466] EXT4-fs (loop3): failed to parse options in superblock:  [ 1997.696129][T18490] JFS: Cannot determine volume size [ 1997.696377][T18466] EXT4-fs (loop3): filesystem is read-only 12:59:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1997.718292][T18494] input: syz1 as /devices/virtual/input/input291 [ 1997.727441][T18466] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8903) 12:59:36 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1997.904598][T18500] input: syz1 as /devices/virtual/input/input292 [ 1997.929511][T18502] JFS: Cannot determine volume size [ 1998.002881][T18505] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1998.025713][T18508] input: syz1 as /devices/virtual/input/input293 [ 1998.032231][T18505] EXT4-fs (loop3): failed to parse options in superblock:  [ 1998.039554][T18505] EXT4-fs (loop3): filesystem is read-only [ 1998.061522][T18505] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1998.141999][T18505] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1998.157022][T18505] EXT4-fs (loop3): failed to parse options in superblock:  [ 1998.180854][T18505] EXT4-fs (loop3): filesystem is read-only [ 1998.202946][T18505] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:36 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xb1000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:36 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:36 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8904) 12:59:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) [ 1998.390042][T18517] input: syz1 as /devices/virtual/input/input294 [ 1998.393217][T18514] JFS: Cannot determine volume size [ 1998.403659][T18521] input: syz1 as /devices/virtual/input/input295 [ 1998.430129][ T26] kauditd_printk_skb: 1 callbacks suppressed 12:59:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1998.430142][ T26] audit: type=1326 audit(1560430776.854:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18524 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:36 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:37 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1998.559925][T18527] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1998.574805][T18533] input: syz1 as /devices/virtual/input/input296 [ 1998.590783][T18527] EXT4-fs (loop3): failed to parse options in superblock:  [ 1998.598236][T18527] EXT4-fs (loop3): filesystem is read-only 12:59:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1998.632625][T18527] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1998.684496][T18539] input: syz1 as /devices/virtual/input/input297 [ 1998.712558][T18527] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x890b) 12:59:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1998.730188][T18527] EXT4-fs (loop3): failed to parse options in superblock:  [ 1998.745684][T18527] EXT4-fs (loop3): filesystem is read-only [ 1998.755280][T18541] JFS: Cannot determine volume size [ 1998.760854][T18527] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1998.841946][T18548] input: syz1 as /devices/virtual/input/input298 [ 1998.975568][T18552] input: syz1 as /devices/virtual/input/input299 [ 1999.231041][ T26] audit: type=1326 audit(1560430777.664:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18524 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:37 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0xff9f0000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:37 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:37 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x34], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8912) [ 1999.350459][T18557] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1999.373191][T18557] EXT4-fs (loop3): failed to parse options in superblock:  [ 1999.385761][T18569] input: syz1 as /devices/virtual/input/input301 [ 1999.387762][T18565] JFS: Cannot determine volume size 12:59:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 1999.405113][T18557] EXT4-fs (loop3): filesystem is read-only [ 1999.418561][T18561] input: syz1 as /devices/virtual/input/input300 [ 1999.433122][T18557] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1999.444439][ T26] audit: type=1326 audit(1560430777.874:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18570 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:37 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x0, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 1999.537413][T18557] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1999.550899][T18557] EXT4-fs (loop3): failed to parse options in superblock:  [ 1999.566845][T18557] EXT4-fs (loop3): filesystem is read-only 12:59:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:38 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) [ 1999.587241][T18557] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1999.664443][T18583] JFS: Cannot determine volume size 12:59:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8916) [ 1999.747458][T18592] input: syz1 as /devices/virtual/input/input303 [ 1999.858190][T18597] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 1999.868156][T18599] input: syz1 as /devices/virtual/input/input304 [ 1999.875186][T18597] EXT4-fs (loop3): failed to parse options in superblock:  [ 1999.887058][T18597] EXT4-fs (loop3): filesystem is read-only [ 1999.893192][T18597] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 1999.966535][T18601] input: syz1 as /devices/virtual/input/input305 [ 1999.985704][T18597] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2000.004629][T18597] EXT4-fs (loop3): failed to parse options in superblock:  [ 2000.016946][T18597] EXT4-fs (loop3): filesystem is read-only [ 2000.025528][T18597] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 2000.224641][ T26] audit: type=1326 audit(1560430778.654:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18570 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:38 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x20000000000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:38 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x0, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:38 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(r0, r1, 0x0) 12:59:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000032c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) 12:59:38 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8933) [ 2000.352846][T18610] input: syz1 as /devices/virtual/input/input306 [ 2000.354619][T18615] JFS: Cannot determine volume size [ 2000.373060][T18618] input: syz1 as /devices/virtual/input/input307 [ 2000.377645][T18611] EXT4-fs (loop3): Unrecognized mount option "" or missing value 12:59:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2000.405452][ T26] audit: type=1326 audit(1560430778.834:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18619 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 [ 2000.440647][T18611] EXT4-fs (loop3): failed to parse options in superblock:  12:59:38 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x38, 0x0, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 2000.469755][T18611] EXT4-fs (loop3): filesystem is read-only [ 2000.480681][T18611] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:39 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r1, 0x0) 12:59:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2000.582522][T18611] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2000.616534][T18611] EXT4-fs (loop3): failed to parse options in superblock:  [ 2000.624053][T18627] JFS: Cannot determine volume size [ 2000.639685][T18611] EXT4-fs (loop3): filesystem is read-only [ 2000.660608][T18611] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x8981) 12:59:39 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x0, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 2000.715100][T18638] input: syz1 as /devices/virtual/input/input309 [ 2000.827183][T18640] input: syz1 as /devices/virtual/input/input310 [ 2000.909280][T18642] JFS: Cannot determine volume size [ 2000.925766][T18647] input: syz1 as /devices/virtual/input/input311 [ 2001.191541][ T26] audit: type=1326 audit(1560430779.624:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18619 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:39 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x60000000000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:39 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r1, 0x0) 12:59:39 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x0, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0xae01) [ 2001.317387][T18659] input: syz1 as /devices/virtual/input/input312 [ 2001.329543][T18663] input: syz1 as /devices/virtual/input/input313 [ 2001.348569][T18652] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2001.367823][T18660] JFS: Cannot determine volume size [ 2001.375656][T18652] EXT4-fs (loop3): failed to parse options in superblock:  [ 2001.393321][ T26] audit: type=1326 audit(1560430779.824:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18664 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2001.395659][T18652] EXT4-fs (loop3): filesystem is read-only [ 2001.430823][T18652] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:39 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x63, 0x0, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:40 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) dup3(r0, r1, 0x0) 12:59:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2001.513225][T18669] input: syz1 as /devices/virtual/input/input314 [ 2001.536660][T18652] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2001.577450][T18652] EXT4-fs (loop3): failed to parse options in superblock:  [ 2001.601075][T18652] EXT4-fs (loop3): filesystem is read-only [ 2001.610421][T18652] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x400454ca) [ 2001.636934][T18676] JFS: Cannot determine volume size [ 2001.654506][T18679] input: syz1 as /devices/virtual/input/input315 12:59:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="8000000038fc000019000300e60100006c0000000034c0000100000001000000004000000040000080000000000000006d5e2b5a0000ffff53ef84be7d63778e34f3386c0a6bd1563e81a8ad78845cd86bd753f5b8bf3f769abfa869d8000000000000000012155102ceabbe734af6448e37e3bdfb3442bbc1a935c6ef83d617dd7bf0d2586f385d7443e56d82b507676b60772f1b6361f4b92fe92418d45f9fd781f40c623d2e71c245e5da544f6665090336161e77a228a139ad86f06172305901e33dca141535654f378f54ce648cfb4baa63d08a0b572f295cfd18c5c0b311930fae27beba612ac5be8e280052d2b9db6f7266aad5164e6bd5fb613ee12a9d61d8c2e3a740bb76a38240139f72f59540642536648de3283408e77a45f3abd3cd83605f2addd0e44529eb99e212d228dce3330c36ec80a0824be761cdcc425e1dd5cdaed69f2e1d824acf136722d760df6b7741906d2582d2dd8dd9050480f55bc9a01437952f527f61c84094ed6f3ae585049be1c189f810a7e70199d084e9e02be7b4b86c96b80d57c4ae13e29ae9ffe2909fa06e7f02f447b4749eeeacf986a90b0904ab93fa617c0edc8be5ed5ce46eba41a831794349971cb3e78ddc3ea1cf12191da3bd25235b764249908a0bb1916ebe3dc2bff23f3b42d312fbc1af06ec9d1099233fe05e4cae319ae5421e1a1d007ae9e0cecdbbaf8b200d843419", 0x201, 0x400}], 0x0, 0x0) [ 2001.794251][T18685] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2001.802321][T18685] EXT4-fs (loop3): failed to parse options in superblock:  [ 2001.802345][T18685] EXT4-fs (loop3): filesystem is read-only [ 2001.802358][T18685] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 2001.846268][T18687] input: syz1 as /devices/virtual/input/input316 [ 2001.891428][T18685] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2001.900383][T18685] EXT4-fs (loop3): failed to parse options in superblock:  [ 2001.914337][T18685] EXT4-fs (loop3): filesystem is read-only [ 2001.920263][T18685] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 2002.191490][ T26] audit: type=1326 audit(1560430780.624:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18664 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:40 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x806b0100000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:40 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x0, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:40 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) 12:59:40 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045564) 12:59:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2002.324959][T18701] JFS: Cannot determine volume size [ 2002.331799][T18698] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2002.343421][T18705] input: syz1 as /devices/virtual/input/input318 [ 2002.359122][T18711] input: syz1 as /devices/virtual/input/input319 [ 2002.361140][T18698] EXT4-fs (loop3): failed to parse options in superblock:  [ 2002.386764][ T26] audit: type=1326 audit(1560430780.814:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18709 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:40 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x0, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) [ 2002.440357][T18698] EXT4-fs (loop3): filesystem is read-only [ 2002.450835][T18698] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 12:59:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:41 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) [ 2002.558504][T18698] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2002.576086][T18724] input: syz1 as /devices/virtual/input/input320 [ 2002.582133][T18720] JFS: Cannot determine volume size 12:59:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2002.606143][T18698] EXT4-fs (loop3): failed to parse options in superblock:  12:59:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045565) [ 2002.643980][T18698] EXT4-fs (loop3): filesystem is read-only [ 2002.686274][T18731] input: syz1 as /devices/virtual/input/input321 [ 2002.701057][T18698] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 2002.746947][T18735] input: syz1 as /devices/virtual/input/input322 [ 2002.845415][T18738] input: syz1 as /devices/virtual/input/input323 [ 2003.178952][ T26] audit: type=1326 audit(1560430781.604:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18709 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0x0 12:59:41 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x81, 0x100000000000000}, {0x0, 0x3, 0xffffffffffffff7f, 0x6}, {0x6}]}) 12:59:41 executing program 2: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)={[{@discard='discard'}, {@resize='resize'}, {@umask={'umask', 0x3d, 0x4}}, {@noquota='noquota'}, {@gid={'gid'}}, {@integrity='integrity'}], [{@fsuuid={'fsuuid', 0x3d, {[0x65, 0x0, 0x0, 0x79, 0x0, 0x38, 0x34, 0x64], 0x2d, [0x33, 0x63, 0x66, 0x64], 0x2d, [0x36, 0x66, 0x38, 0x30], 0x2d, [0x61, 0x31, 0x7f, 0x73], 0x2d, [0x7f, 0x65, 0x61, 0x31, 0x7f, 0x35, 0x75, 0x32]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@appraise='appraise'}, {@fowner_eq={'fowner'}}]}) 12:59:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 12:59:41 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x201, 0x400}], 0x0, 0x0) 12:59:41 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) dup3(0xffffffffffffffff, r1, 0x0) 12:59:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x40045566) [ 2003.321512][T18754] input: syz1 as /devices/virtual/input/input325 [ 2003.331711][T18748] input: syz1 as /devices/virtual/input/input324 12:59:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$nl_xfrm(r0, &(0x7f0000003280)={0x0, 0x0, &(0x7f0000003240)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dc9a055e0bcfec7be070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) [ 2003.365887][T18752] EXT4-fs (loop3): Unrecognized mount option "" or missing value [ 2003.375614][T18749] JFS: Cannot determine volume size [ 2003.391483][T18752] EXT4-fs (loop3): failed to parse options in superblock:  [ 2003.404297][T18752] EXT4-fs (loop3): filesystem is read-only [ 2003.418953][T18752] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 35940 [ 2003.434471][T18759] input: syz1 as /devices/virtual/input/input326 [ 2003.448948][T18748] ------------[ cut here ]------------ [ 2003.454890][T18748] refcount_t: increment on 0; use-after-free. [ 2003.461680][T18748] WARNING: CPU: 1 PID: 18748 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 2003.469511][T18743] kobject: '(null)' (0000000002cea3da): kobject_cleanup, parent 0000000001e27d2a [ 2003.471370][T18748] Kernel panic - not syncing: panic_on_warn set ... [ 2003.471416][T18748] CPU: 1 PID: 18748 Comm: syz-executor.1 Not tainted 5.2.0-rc4-next-20190613 #14 [ 2003.471433][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2003.494220][T18754] kobject: '(null)' (0000000060d1c3ba): calling ktype release [ 2003.496273][T18748] Call Trace: [ 2003.496298][T18748] dump_stack+0x172/0x1f0 [ 2003.496319][T18748] ? refcount_inc_checked+0x40/0x70 [ 2003.496344][T18748] panic+0x2cb/0x744 [ 2003.496360][T18748] ? __warn_printk+0xf3/0xf3 [ 2003.496381][T18748] ? refcount_inc_checked+0x61/0x70 [ 2003.522490][T18743] kobject: '(null)' (0000000002cea3da): calling ktype release [ 2003.526689][T18748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2003.526709][T18748] ? __warn.cold+0x5/0x4d [ 2003.526730][T18748] ? refcount_inc_checked+0x61/0x70 [ 2003.526746][T18748] __warn.cold+0x20/0x4d [ 2003.526761][T18748] ? refcount_inc_checked+0x61/0x70 [ 2003.526782][T18748] report_bug+0x263/0x2b0 [ 2003.577431][T18748] do_error_trap+0x11b/0x200 [ 2003.582034][T18748] do_invalid_op+0x37/0x50 [ 2003.586547][T18748] ? refcount_inc_checked+0x61/0x70 [ 2003.591794][T18748] invalid_op+0x14/0x20 [ 2003.595956][T18748] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 2003.601764][T18748] Code: 1d f6 0a 68 06 31 ff 89 de e8 9b c3 3b fe 84 db 75 dd e8 52 c2 3b fe 48 c7 c7 e0 bb c4 87 c6 05 d6 0a 68 06 01 e8 9d f3 0d fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 2003.621371][T18748] RSP: 0018:ffff88805530f8b8 EFLAGS: 00010282 [ 2003.627447][T18748] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 2003.635428][T18748] RDX: 000000000001b828 RSI: ffffffff815b0cb6 RDI: ffffed100aa61f09 [ 2003.643413][T18748] RBP: ffff88805530f8c8 R08: ffff8880892fa680 R09: 0000000000000000 [ 2003.651498][T18748] R10: 0000000000000000 R11: ffff8880892faf30 R12: ffff888094f57a38 [ 2003.659479][T18748] R13: 0000000000000000 R14: ffff888089e04500 R15: ffff88809693df10 [ 2003.667481][T18748] ? vprintk_func+0x86/0x189 [ 2003.672086][T18748] ? refcount_inc_checked+0x61/0x70 [ 2003.677293][T18748] kobject_get+0x66/0xc0 [ 2003.681545][T18748] cdev_get+0x60/0xb0 [ 2003.685528][T18748] chrdev_open+0xb0/0x6b0 [ 2003.689858][T18748] ? cdev_put.part.0+0x50/0x50 [ 2003.694628][T18748] ? security_file_open+0x87/0x300 [ 2003.699749][T18748] do_dentry_open+0x4df/0x1250 [ 2003.704514][T18748] ? kasan_check_read+0x11/0x20 [ 2003.709367][T18748] ? cdev_put.part.0+0x50/0x50 [ 2003.714147][T18748] ? chown_common+0x5c0/0x5c0 [ 2003.718854][T18748] ? inode_permission+0xb4/0x560 [ 2003.723889][T18748] vfs_open+0xa0/0xd0 [ 2003.727877][T18748] path_openat+0x10e9/0x46d0 [ 2003.732467][T18748] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2003.738268][T18748] ? kasan_slab_alloc+0xf/0x20 [ 2003.743035][T18748] ? kmem_cache_alloc+0x11a/0x6f0 [ 2003.748090][T18748] ? getname_flags+0xd6/0x5b0 [ 2003.752775][T18748] ? getname+0x1a/0x20 [ 2003.756862][T18748] ? do_sys_open+0x2c9/0x5d0 [ 2003.764436][T18748] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2003.769830][T18748] ? __alloc_fd+0x44d/0x560 [ 2003.774350][T18748] ? find_held_lock+0x35/0x130 [ 2003.779126][T18748] do_filp_open+0x1a1/0x280 [ 2003.783637][T18748] ? may_open_dev+0x100/0x100 [ 2003.788328][T18748] ? kasan_check_read+0x11/0x20 [ 2003.793191][T18748] ? do_raw_spin_unlock+0x57/0x270 [ 2003.798310][T18748] ? _raw_spin_unlock+0x2d/0x50 [ 2003.803164][T18748] ? __alloc_fd+0x44d/0x560 [ 2003.807681][T18748] do_sys_open+0x3fe/0x5d0 [ 2003.812104][T18748] ? filp_open+0x80/0x80 [ 2003.816358][T18748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2003.821821][T18748] ? do_syscall_64+0x26/0x680 [ 2003.826508][T18748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2003.832580][T18748] ? do_syscall_64+0x26/0x680 [ 2003.837274][T18748] __x64_sys_open+0x7e/0xc0 [ 2003.841782][T18748] do_syscall_64+0xfd/0x680 [ 2003.846298][T18748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2003.852195][T18748] RIP: 0033:0x4131b1 [ 2003.856100][T18748] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2003.875711][T18748] RSP: 002b:00007f1d8a5d37a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2003.884138][T18748] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004131b1 [ 2003.892122][T18748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f1d8a5d3850 [ 2003.900185][T18748] RBP: 000000000075bf20 R08: 000000000000000f R09: 0000000000000000 [ 2003.908162][T18748] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f1d8a5d46d4 [ 2003.916144][T18748] R13: 00000000004c8455 R14: 00000000004decf0 R15: 00000000ffffffff [ 2003.926094][T18748] Kernel Offset: disabled [ 2003.930616][T18748] Rebooting in 86400 seconds..