[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. 2020/10/04 05:28:51 fuzzer started 2020/10/04 05:28:51 dialing manager at 10.128.0.105:33091 2020/10/04 05:29:18 syscalls: 3308 2020/10/04 05:29:18 code coverage: enabled 2020/10/04 05:29:18 comparison tracing: enabled 2020/10/04 05:29:18 extra coverage: extra coverage is not supported by the kernel 2020/10/04 05:29:18 setuid sandbox: enabled 2020/10/04 05:29:18 namespace sandbox: enabled 2020/10/04 05:29:18 Android sandbox: enabled 2020/10/04 05:29:18 fault injection: enabled 2020/10/04 05:29:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/04 05:29:18 net packet injection: enabled 2020/10/04 05:29:18 net device setup: enabled 2020/10/04 05:29:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/04 05:29:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/04 05:29:18 USB emulation: /dev/raw-gadget does not exist 2020/10/04 05:29:18 hci packet injection: enabled 2020/10/04 05:29:18 wifi device emulation: enabled 05:32:08 executing program 0: syzkaller login: [ 236.740425] audit: type=1400 audit(1601789528.568:8): avc: denied { execmem } for pid=6478 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:32:08 executing program 1: 05:32:08 executing program 2: 05:32:09 executing program 3: 05:32:09 executing program 4: 05:32:09 executing program 5: [ 237.879943] IPVS: ftp: loaded support on port[0] = 21 [ 237.998101] chnl_net:caif_netlink_parms(): no params data found [ 238.119007] IPVS: ftp: loaded support on port[0] = 21 [ 238.170364] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.176993] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.185718] device bridge_slave_0 entered promiscuous mode [ 238.195168] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.201508] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.209202] device bridge_slave_1 entered promiscuous mode [ 238.274280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.306702] IPVS: ftp: loaded support on port[0] = 21 [ 238.333531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.379244] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.388456] team0: Port device team_slave_0 added [ 238.403279] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.416221] team0: Port device team_slave_1 added [ 238.429661] chnl_net:caif_netlink_parms(): no params data found [ 238.469002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.475514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.501010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.527038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.533689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.563663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.576021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 238.598515] IPVS: ftp: loaded support on port[0] = 21 [ 238.638647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.680181] IPVS: ftp: loaded support on port[0] = 21 [ 238.722577] IPVS: ftp: loaded support on port[0] = 21 [ 238.754297] device hsr_slave_0 entered promiscuous mode [ 238.761936] device hsr_slave_1 entered promiscuous mode [ 238.790716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 238.798050] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 238.838084] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.848594] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.856382] device bridge_slave_0 entered promiscuous mode [ 238.865337] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.871678] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.879160] device bridge_slave_1 entered promiscuous mode [ 238.967227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.984317] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.998079] chnl_net:caif_netlink_parms(): no params data found [ 239.059691] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.069625] team0: Port device team_slave_0 added [ 239.076574] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.085067] team0: Port device team_slave_1 added [ 239.127848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.137526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.165372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.200827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.207653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.233325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.246122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.256015] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.338173] device hsr_slave_0 entered promiscuous mode [ 239.344262] device hsr_slave_1 entered promiscuous mode [ 239.370777] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.377450] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.385198] device bridge_slave_0 entered promiscuous mode [ 239.398812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 239.423501] chnl_net:caif_netlink_parms(): no params data found [ 239.432090] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.439041] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.448547] device bridge_slave_1 entered promiscuous mode [ 239.468357] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.477621] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 239.518985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.605150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.614744] team0: Port device team_slave_0 added [ 239.619830] chnl_net:caif_netlink_parms(): no params data found [ 239.673804] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.681217] team0: Port device team_slave_1 added [ 239.688194] chnl_net:caif_netlink_parms(): no params data found [ 239.698467] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.763065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.769325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.796559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.812124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.819657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.845660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.862414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.870722] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.903382] Bluetooth: hci0: command 0x0409 tx timeout [ 239.961917] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.973568] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.981895] device bridge_slave_0 entered promiscuous mode [ 239.989372] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.996320] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.004002] device bridge_slave_0 entered promiscuous mode [ 240.013292] device hsr_slave_0 entered promiscuous mode [ 240.019333] device hsr_slave_1 entered promiscuous mode [ 240.029031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 240.036763] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.046358] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.054358] device bridge_slave_1 entered promiscuous mode [ 240.061010] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.067540] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.074940] device bridge_slave_1 entered promiscuous mode [ 240.081196] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 240.128401] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.136804] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.144190] Bluetooth: hci1: command 0x0409 tx timeout [ 240.144957] device bridge_slave_0 entered promiscuous mode [ 240.168483] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.197842] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.204835] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.211793] device bridge_slave_1 entered promiscuous mode [ 240.234870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.257055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.278849] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.289806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.299455] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.303136] Bluetooth: hci2: command 0x0409 tx timeout [ 240.312220] team0: Port device team_slave_0 added [ 240.319168] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.332410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.340095] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.356008] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.364079] team0: Port device team_slave_1 added [ 240.409895] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.418410] team0: Port device team_slave_0 added [ 240.429694] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.439614] team0: Port device team_slave_1 added [ 240.446089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.452321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.462640] Bluetooth: hci3: command 0x0409 tx timeout [ 240.477989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.493541] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.500872] team0: Port device team_slave_0 added [ 240.508806] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.517234] team0: Port device team_slave_1 added [ 240.524493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.550043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.556492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.583461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.600027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.608451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.617284] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.627059] Bluetooth: hci4: command 0x0409 tx timeout [ 240.638707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.645398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.670769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.687182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.693567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.719064] Bluetooth: hci5: command 0x0409 tx timeout [ 240.724563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.738480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.746967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.764054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.770297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.798814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.810646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.818444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.844568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.855591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.871395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 240.877601] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.890027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.900175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.911186] device hsr_slave_0 entered promiscuous mode [ 240.917888] device hsr_slave_1 entered promiscuous mode [ 240.927518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.940158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.954088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 240.969553] device hsr_slave_0 entered promiscuous mode [ 240.976137] device hsr_slave_1 entered promiscuous mode [ 240.982286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.990118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.998168] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.004752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.017559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.025459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.033502] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.043705] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 241.051480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.073882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.081867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.090147] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.096541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.106830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.118705] device hsr_slave_0 entered promiscuous mode [ 241.125488] device hsr_slave_1 entered promiscuous mode [ 241.131635] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 241.164428] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.180134] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 241.187065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.218661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.246358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.276768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.295596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.336310] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.349801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.358271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.366316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.373733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.381437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.430131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.439650] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.447517] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.465129] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 241.471207] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.481923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.490072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.523016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.538821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 241.548198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.555265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.566604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.574333] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.580669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.587702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.595703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.610610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.627987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.635195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.642214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.651610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.659815] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.666213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.676894] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.688423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 241.699116] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 241.711808] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.721125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.729080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.738660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.746796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.754109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.764731] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 241.770726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.783879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 241.793447] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 241.799506] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.814957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 241.826560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.834139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.841851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.849796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.857503] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.863903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.870812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.879326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.887676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.894793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.917524] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 241.926025] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.937607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.953113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.960908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.969489] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.975895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.982606] Bluetooth: hci0: command 0x041b tx timeout [ 241.988228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.996235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.005080] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 242.024815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.036120] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 242.045070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.051792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.058992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.066989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.078601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.088341] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.096060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.106599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.114829] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.131121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.150020] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 242.157890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.167721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.178259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.188389] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.198290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.206899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.214962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.221804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.229335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.237108] Bluetooth: hci1: command 0x041b tx timeout [ 242.239796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 242.249216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.258157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.268233] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 242.278369] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 242.285042] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.292012] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 242.300637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.311675] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 242.321998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 242.335002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 242.341866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.349929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.357659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 242.365878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 242.376108] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 242.382172] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.382628] Bluetooth: hci2: command 0x041b tx timeout [ 242.389743] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 242.399690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.409957] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 242.421689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.431601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 242.443449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 242.452003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.463080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.470794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.479110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.486873] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.493268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.500206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.507904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.515490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.523462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.531003] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.537382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.544811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.551900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.560252] Bluetooth: hci3: command 0x041b tx timeout [ 242.563443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.583785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.591347] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 242.603137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.610091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.619210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.627700] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.634123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.640915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.654194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 242.666796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.677837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.687105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.699676] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.704153] Bluetooth: hci4: command 0x041b tx timeout [ 242.706077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.718392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.730401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.738752] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 242.748776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.760370] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 242.768296] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 242.775000] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 242.781305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.788981] Bluetooth: hci5: command 0x041b tx timeout [ 242.796312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 242.806489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.821658] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 242.835433] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 242.841980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.850493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.858585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.865454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.872099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.879807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.887347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 242.894561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.901445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.911029] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 242.924237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 242.936107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 242.944627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 242.956118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.963940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 242.971633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.986062] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 242.998198] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 243.005288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.012560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.021123] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 243.030562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.043552] device veth0_vlan entered promiscuous mode [ 243.049986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 243.058278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 243.070305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 243.083431] device veth1_vlan entered promiscuous mode [ 243.089283] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 243.099271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.108001] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.116120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.123815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.134054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 243.144245] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 243.155510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 243.165146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 243.174236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 243.185833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.194388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.204847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 243.225045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.233165] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 243.239190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.247989] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 243.257181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.266213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 243.275024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.283174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.293102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 243.299125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.315245] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 243.329317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 243.345966] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 243.360366] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 243.372886] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 243.381535] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 243.393329] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 243.401311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.408867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.418358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.426945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.435238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.443730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.452090] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 243.463499] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 243.474468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.481350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.490954] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 243.501581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.510957] device veth0_macvtap entered promiscuous mode [ 243.518292] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 243.527828] device veth1_macvtap entered promiscuous mode [ 243.534967] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 243.545363] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 243.551415] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.559723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.567201] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.574772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.581511] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.597200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 243.611630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 243.623561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.635693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 243.646316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 243.658792] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.665183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.674663] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 243.681721] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 243.696224] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 243.708298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 243.720569] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 243.732091] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 243.739618] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 243.750594] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 243.759100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.766532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 243.775008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 243.783242] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.789662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.798583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 243.808491] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 243.818191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 243.829829] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 243.837105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.845406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.853472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 243.861672] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.869858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.879447] device veth0_vlan entered promiscuous mode [ 243.887299] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 243.906739] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 243.914080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.921990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.930085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.938068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.945791] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.953067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.963898] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 243.971814] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 243.986561] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 243.993971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.003869] device veth0_vlan entered promiscuous mode [ 244.010942] device veth1_vlan entered promiscuous mode [ 244.024898] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 244.031310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.038752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.048084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.056534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.064801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.072702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.080574] Bluetooth: hci0: command 0x040f tx timeout [ 244.083244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.105828] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 244.113730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.126299] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 244.139663] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.148559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.159881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.167986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.176376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.185136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.217645] device veth1_vlan entered promiscuous mode [ 244.234314] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 244.241287] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 244.253108] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 244.276819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.288790] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 244.300370] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 244.307000] Bluetooth: hci1: command 0x040f tx timeout [ 244.314742] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 244.321358] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 244.337584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.345822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.358179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 244.368380] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 244.380853] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 244.390355] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 244.402792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.403313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.419083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.428135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.436205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.444243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.451840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.459476] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.467347] Bluetooth: hci2: command 0x040f tx timeout [ 244.469433] device veth0_macvtap entered promiscuous mode [ 244.481177] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 244.490089] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 244.505405] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 244.513961] device veth0_vlan entered promiscuous mode [ 244.526487] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 244.533584] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.548729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.556610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.565317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.573502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.580863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.589338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.597904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.605387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.614109] device veth0_vlan entered promiscuous mode [ 244.622652] Bluetooth: hci3: command 0x040f tx timeout [ 244.627052] device veth1_vlan entered promiscuous mode [ 244.634087] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 244.642729] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 244.648745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.658258] device veth1_macvtap entered promiscuous mode [ 244.665139] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 244.674006] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 244.689359] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 244.699973] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 244.711749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 244.720196] device veth0_macvtap entered promiscuous mode [ 244.728902] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 244.736799] device veth1_vlan entered promiscuous mode [ 244.746028] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 244.753086] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.760243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.767833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.775458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.783196] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.790367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.798224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.806078] Bluetooth: hci4: command 0x040f tx timeout [ 244.808086] device veth0_macvtap entered promiscuous mode [ 244.819016] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 244.833196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 244.848900] device veth1_macvtap entered promiscuous mode [ 244.855204] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 244.863979] Bluetooth: hci5: command 0x040f tx timeout [ 244.874503] device veth1_macvtap entered promiscuous mode [ 244.880663] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 244.888684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 244.898659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.909080] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 244.916417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.928375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 244.937912] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 244.948578] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 244.957846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.967183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.975150] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 244.983023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.990064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.999112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.008277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.018386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.029649] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 245.036652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.060874] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 245.070405] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 245.087785] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 245.096700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 245.104421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.112530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.121030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.128231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.137667] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 245.149111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 245.162863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.170889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.187269] device veth0_macvtap entered promiscuous mode [ 245.198526] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 245.206921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.217621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.227230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.237532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.248840] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 245.256361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.265903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.275932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.285510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.295886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.305341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.315121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.325415] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 245.333785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.341702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.352472] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.360411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.369611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.377853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.393779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.402670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.413528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.428792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.440042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.450494] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 245.458065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.469887] device veth1_macvtap entered promiscuous mode [ 245.488649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.505304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.527547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.545408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.557974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.570647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.580187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.593214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.604388] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 245.611277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.627014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 245.655072] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 245.663292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 245.671175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.694242] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 245.701376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 245.746463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.756998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.767536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.777558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.786763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.797761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.807180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 245.816997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.827639] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 245.836016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.845286] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 245.860913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 245.869879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.877995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.903490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.911036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.920645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.931292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.942684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.951789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.962531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.971647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 245.982225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.991332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 246.002775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.013055] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 246.019920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.050285] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 246.058033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.079253] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.097897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.113170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.120286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.143359] Bluetooth: hci0: command 0x0419 tx timeout [ 246.170357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.260307] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 246.295849] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready 05:32:18 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x48004) [ 246.307875] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 246.327808] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 246.341288] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 246.378633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.393214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.413568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 05:32:18 executing program 0: r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) [ 246.428057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.430159] Bluetooth: hci1: command 0x0419 tx timeout 05:32:18 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f83dfae"}, 0x0, 0x0, @userptr}) [ 246.476059] device veth0_vlan entered promiscuous mode [ 246.488558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.496129] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 05:32:18 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000400)=0x6, 0x4) [ 246.525514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.554761] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 246.555269] Bluetooth: hci2: command 0x0419 tx timeout [ 246.569466] device veth1_vlan entered promiscuous mode [ 246.602356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.610277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:32:18 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000400)=0x6, 0x4) [ 246.662699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 246.695043] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 246.701402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.703188] Bluetooth: hci3: command 0x0419 tx timeout [ 246.720360] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 246.735970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:32:18 executing program 1: prctl$PR_GET_NAME(0x29, &(0x7f0000000200)=""/218) 05:32:18 executing program 0: add_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) [ 246.777884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 246.799554] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 246.833416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.841307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.870966] device veth0_macvtap entered promiscuous mode [ 246.877184] Bluetooth: hci4: command 0x0419 tx timeout 05:32:18 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x288000, 0x0) accept(r0, 0x0, 0x0) [ 246.888059] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 246.919677] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 246.940688] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 246.949761] Bluetooth: hci5: command 0x0419 tx timeout [ 246.959943] device veth1_macvtap entered promiscuous mode [ 246.975047] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 247.011432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 247.040893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.055626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.072619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.079290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.110315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 247.120891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.132488] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.139612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.147721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.158087] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 247.174933] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 247.181130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.219623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.229346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.246887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.266425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.280131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.295858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.306380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.316271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.326471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.336035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 247.346343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.357060] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 247.364654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.379004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.392482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.400216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.410497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.420510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.430652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.440411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.449661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.459409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.468741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.478490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.487642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 247.498025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.508860] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 247.515810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.525796] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.533401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.540514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.547986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.556580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.567136] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 247.585878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 05:32:19 executing program 2: ppoll(&(0x7f0000000f00)=[{}], 0x1, &(0x7f0000000f40)={0x0, 0x619}, 0x0, 0x0) [ 247.618362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.649617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:32:19 executing program 3: r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, r0) 05:32:19 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) prctl$PR_GET_NAME(0x28, &(0x7f0000000200)=""/218) [ 247.960102] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 247.968083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.991162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.000842] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 05:32:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100), 0x4) 05:32:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) 05:32:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000001180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00\x00', @ANYRESDEC], 0x28}}], 0x2, 0x0) 05:32:19 executing program 2: prctl$PR_GET_NAME(0x18, 0x0) 05:32:19 executing program 0: add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x20000101, 0xfffffffffffffffe) 05:32:19 executing program 3: r0 = gettid() process_vm_writev(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)=""/138, 0x8a}], 0x2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/17, 0x11}, {0x0}, {&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/68, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000600)=""/86, 0x56}], 0x9, 0x0) [ 248.007341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.019491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.027554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.036841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:32:20 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/218) 05:32:20 executing program 3: prctl$PR_GET_NAME(0x21, 0x0) 05:32:20 executing program 2: prctl$PR_GET_NAME(0xf, 0x0) 05:32:20 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "6f83dfae"}, 0x0, 0x0, @userptr}) 05:32:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000200), 0x14) 05:32:20 executing program 5: prctl$PR_GET_NAME(0x27, &(0x7f0000000200)=""/218) 05:32:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x4}]}, 0x18}}, 0x0) 05:32:20 executing program 3: prctl$PR_GET_NAME(0xf, &(0x7f0000000100)=""/219) sched_rr_get_interval(0x0, &(0x7f0000000040)) 05:32:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x1, 0x1, 0x201}, 0x14}}, 0x0) 05:32:20 executing program 1: r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='Q', 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 05:32:20 executing program 0: sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x800000000009031, 0xffffffffffffffff, 0x0) gettid() mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000080)=0x5) 05:32:20 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) 05:32:20 executing program 3: syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x9, 0x248081) 05:32:20 executing program 4: prctl$PR_GET_NAME(0x34, &(0x7f0000000200)=""/218) 05:32:20 executing program 1: prctl$PR_GET_NAME(0x1c, 0x0) 05:32:20 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) 05:32:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x11) 05:32:20 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 05:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, 0x0, 0x0, 0x120, 0x0, 0x0) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:20 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xc9) 05:32:20 executing program 3: prctl$PR_GET_NAME(0x21, &(0x7f0000000200)=""/218) 05:32:20 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x6ca083, 0x0) 05:32:20 executing program 4: r0 = epoll_create(0x7) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0x7) 05:32:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x20000010, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) 05:32:20 executing program 3: sendto(0xffffffffffffffff, 0x0, 0xffffffffffffff32, 0x0, 0x0, 0x0) 05:32:20 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 05:32:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000140)=""/79, 0x4f, 0x20, 0x0, 0x0) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:20 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x3f54ff0977e56ce2, 0x192) 05:32:20 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100) 05:32:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000140)='X', 0x1, 0x40000, 0x0, 0x0) 05:32:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) 05:32:20 executing program 0: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) 05:32:20 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8040, 0x21) 05:32:20 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 05:32:21 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) futimesat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x77359400}, {0x77359400}}) 05:32:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:21 executing program 1: semget$private(0x0, 0x1, 0x1) 05:32:21 executing program 4: semget$private(0x0, 0x3, 0x20) 05:32:21 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) 05:32:21 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0xc080, &(0x7f0000000180)=@nl=@proc, 0x80) 05:32:21 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:32:21 executing program 4: semget$private(0x0, 0x4, 0x460) 05:32:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/100, 0x64, 0x0, &(0x7f00000000c0)=@abs, 0x6e) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:21 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0x7f, 0x0, 0x0) 05:32:21 executing program 5: semget$private(0x0, 0x7, 0x10) 05:32:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0), 0x0, 0x100, 0x0, 0x0) 05:32:21 executing program 4: rt_sigaction(0x23, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000100)) 05:32:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40c340, 0x8) 05:32:21 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 05:32:21 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2080, 0x192) 05:32:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="c6", 0x1, 0x20048044, 0x0, 0x0) 05:32:21 executing program 4: r0 = gettid() rt_sigqueueinfo(r0, 0x0, &(0x7f0000000100)) 05:32:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect(r0, 0x0, 0x2e) 05:32:21 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x388443, 0x190) 05:32:21 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x43a140, 0x23) 05:32:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) read$char_raw(r1, &(0x7f0000006a40)=ANY=[], 0x6400) 05:32:21 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x84, 0x0) 05:32:22 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10d440, 0x11a) 05:32:22 executing program 1: semget$private(0x0, 0x4, 0x1c3) 05:32:22 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 05:32:22 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 05:32:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f00000000c0)=""/79, 0x4f, 0x120, 0x0, 0x0) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:22 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x66d081, 0x0) pwritev2(r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x6) 05:32:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="97", 0x1, 0x8895, 0x0, 0x15) 05:32:22 executing program 0: semget$private(0x0, 0x4, 0x282) [ 250.292187] audit: type=1800 audit(1601789542.120:9): pid=8203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15798 res=0 05:32:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/100, 0x64, 0x0, 0x0, 0x0) write$char_raw(r0, &(0x7f0000000200)=ANY=[], 0x7c00) 05:32:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000100)="fa", 0x1, 0x25f4dda6447972a3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 05:32:22 executing program 4: mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[]) 05:32:22 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 05:32:22 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 05:32:22 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) [ 250.414916] audit: type=1800 audit(1601789542.120:10): pid=8203 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=15798 res=0 05:32:22 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f0000000e40)='./file0\x00', 0x0) 05:32:22 executing program 5: shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) 05:32:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) 05:32:22 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) futimesat(r0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0xea60}}) 05:32:22 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 05:32:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 05:32:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 05:32:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) bind$inet(r0, 0x0, 0x0) 05:32:22 executing program 2: ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 05:32:22 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup3(r1, r0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) 05:32:22 executing program 0: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000080), &(0x7f00000001c0)) setresuid(0xee01, r0, 0x0) 05:32:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) futimesat(r0, &(0x7f0000000180)='./file0\x00', 0x0) 05:32:22 executing program 4: keyctl$link(0x8, 0x0, 0xfffffffffffffffb) 05:32:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 05:32:22 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) connect$unix(r0, 0x0, 0x0) 05:32:22 executing program 0: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 05:32:22 executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 05:32:22 executing program 2: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 05:32:22 executing program 3: creat(0x0, 0x0) 05:32:22 executing program 4: r0 = creat(&(0x7f00000022c0)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000002300)='./file0\x00', 0x0, 0x0) 05:32:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0xa8202, 0x0) write$P9_RSETATTR(r0, 0x0, 0x0) 05:32:22 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) 05:32:22 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2, 0x0) write$P9_RUNLINKAT(r0, 0x0, 0x0) 05:32:22 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20200, 0x0) 05:32:22 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000001100), 0x8) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 05:32:22 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, 0x0) 05:32:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 05:32:22 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 05:32:22 executing program 2: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12121, 0x0, 0x0) 05:32:22 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x2) 05:32:22 executing program 0: symlink(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='./file0\x00') 05:32:22 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80080, 0x0) 05:32:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) 05:32:22 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 05:32:23 executing program 1: r0 = eventfd2(0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) 05:32:23 executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@dev, @loopback, @dev}, 0xc) 05:32:23 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 05:32:23 executing program 2: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080)=0x9, 0x0, 0x0) 05:32:23 executing program 0: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) 05:32:23 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000700)='/dev/nvram\x00', 0x400, 0x0) 05:32:23 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880)='nl80211\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000002040)='nl80211\x00') 05:32:23 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x127342, 0x0) 05:32:23 executing program 3: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002280)='TIPCv2\x00') 05:32:23 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'syz_tun\x00', @ifru_map}) 05:32:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) 05:32:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000700000007000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100005"], 0x30}}, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}}, 0x0) 05:32:23 executing program 5: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0xb0a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 05:32:23 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 05:32:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) 05:32:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000008540)={0x0, 0x0, &(0x7f0000008480)=[{0x0}, {0x0}], 0x2, &(0x7f0000008500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) 05:32:23 executing program 2: syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') clock_getres(0x5, &(0x7f0000000000)) 05:32:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 05:32:23 executing program 4: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000006e40), &(0x7f0000006e80), &(0x7f0000006ec0)) 05:32:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60"], 0x0) [ 251.529932] bridge0: port 1(bridge_slave_0) entered disabled state 05:32:23 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) socket$netlink(0x10, 0x3, 0x15) 05:32:23 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002900)='/dev/nvram\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x0) 05:32:23 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000980)='/dev/loop-control\x00', 0x4440, 0x0) [ 251.596567] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.714250] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.736216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.755812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.769118] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.780375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.788352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.800675] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.807139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.824477] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.830884] bridge0: port 2(bridge_slave_1) entered forwarding state 05:32:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/102, 0x66}], 0x1, 0x0, 0x0) 05:32:23 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000027c0)={0x1, &(0x7f0000002780)=[{}]}) 05:32:23 executing program 2: sched_setparam(0x0, &(0x7f0000000300)) 05:32:23 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000100), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 05:32:23 executing program 4: getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) getrusage(0x0, &(0x7f0000000000)) 05:32:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ADD(r0, 0xfffffffffffffffd, 0x0) [ 251.945144] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.953783] bridge0: port 2(bridge_slave_1) entered disabled state 05:32:23 executing program 0: openat$nvram(0xffffffffffffff9c, &(0x7f0000005ac0)='/dev/nvram\x00', 0x40, 0x0) 05:32:23 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x842, 0x0, 0x0) mq_notify(r0, &(0x7f0000000380)) 05:32:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffc9c) 05:32:23 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x3}, {0x8}]}) 05:32:23 executing program 2: r0 = getpid() setpgid(0xffffffffffffffff, r0) 05:32:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 05:32:24 executing program 4: unshare(0x1a020580) 05:32:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x301}, 0x1c}}, 0x0) 05:32:24 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000040)={0x3, 0x0, 0xfffffffeffffffff}, &(0x7f0000000080)={0x5, 0x0, 0x0, 0xffffffffffffff00}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) 05:32:24 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, &(0x7f0000000100)={r0}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 05:32:24 executing program 5: unshare(0x52030000) 05:32:24 executing program 1: r0 = getpid() ptrace$poke(0xffffffffffffffff, r0, 0x0, 0x0) 05:32:24 executing program 4: getresuid(&(0x7f0000006e40), &(0x7f0000006e80), &(0x7f0000006ec0)) 05:32:24 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xae241, 0x0) syz_genetlink_get_family_id$nl80211(0x0) 05:32:24 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000013) 05:32:24 executing program 0: perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) 05:32:24 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000002900)='/dev/nvram\x00', 0x20000, 0x0) 05:32:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40180800}, 0xc, &(0x7f0000000580)={&(0x7f0000002940)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x45, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="9b079cc34405ab1054e8712ddc58d85585a5f71c9244f4bce67db06106a9fc040582a9b0253766757ff2bffe9f04572001561aeeb7e6065344"]}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1e5d, 0x0, 0x0, 0x1, [@generic="9093629ae20391819043ef017492db0b6b3fd1b9d47d7e664b543598952e374ea31016cb3cccfb85bd32bb514d931c1daf5c8ac77597aa784c881a4557d98b150feff8354fe8d923757056ef71d9221569f0b1923e5518020fb0b4b3d48ca1d3f8cefdbf9d7a6a6974fafc271cc3fa43612a6dc6c1ffe87de4833b2a603317fa0d2f2eb70d8a1903f6d756985ebcee", @generic="a28dae", @generic="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", @typed={0xdd, 0x0, 0x0, 0x0, @binary="4f1390a79998558e66a56e1b6e1174c469e6d6a5bd72e8e85764313918a8327af527c2bbfe76a141d757f3207fbdb997be21fb2af4394797e205e4f264de2ed8d1794bb80719c8c2e1104118c9459ce5b397cc67ddb9f85897dc0fb4d7d18f8b85b7672ddd63711b0eea3458986da1318b155e3f336dc26ec783adfde27febb930c5de5f96b085de9a0d7f47a78084eecabdee761e5efe75af62329cad5c0243cb2d99934a614c46b5feaf0f4b0345194fdd43a9dd79e50962c283969c150e97ceffbff161cdbbe53d6c16dae32c25747cc1558fb75e24789d"}, @typed={0xd5, 0x0, 0x0, 0x0, @binary="08d65f4c5cc9bd37b6199388c0a8c3a96332534935394d6fcd9a8d6203fafd89f542f6bac593259cc4812a6bb3024c0da49eafb8f3a2e775f3d3438593ad1847f30c4399744b9a549b79977021a0b38292710e38aefd58186eb16ce7a10c73e2046b4f0c8095382e9866a9a3c0e13ba9cf29136724c113c81a6328405f30ed9882f50276960953f0cc8767526447cf8a5816212ab5f49c893c2b4c449173cb3b7c19eaae37398fb4dbfaa6ab683c7b9cee2d4eec3e9fe0769fb888c5465316e0d27651f33c87901fffd116c71b15273914"}, @typed={0x89, 0x0, 0x0, 0x0, @binary="c7445730fe7ac4c3bce9269e8f25c01a7f705ff553a40b856d45064cc2b918720ef365ea6a8e8aefc0c8ec7b285234fa20d43213617d5df4e8cb0d4531b26f5e9b1906620089eed04e261e81008b9576d7ca140e244f7a75c6ecaa4d9a3a7010e0ea46e3938a76f9fede1df19d3972930b74a5bbe51d361389b160e245708a344e2dfcdf51"}, @generic="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"]}]}, 0x1ec4}}, 0x0) 05:32:24 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002900)='/dev/nvram\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002940)="1ad713f5304b0fcf094e021ea3272bf79782dbbf90592c648f70c3c708896bacb407197535ba40a0e60d924aebf6224afb151106a3adf504d310857b06fe18bfcb71a9bf0da71a9eb78e4858bd3f6262ae0fc24b1e7ae5c34fb9ef11b458b54bf0af14c06f5e3fe44b9e355d98b7cf37e9aac40a94875b24ba111731a01ad585c6056830641cf2086343d17de83137df2b0b6703fb85dfb23f69cc4d67894aa6658127ff76053711aa89ad39be1a6e1746277452caa71929a7544ba85586be72256e2088136b23c47a8e8d010d715fb15b8cd37be4c3a68511e63588de9cf2a6eba00f12edf891585015c4a3a44c8de41b5401000105af2321488bb71d57a62e9561f17e816b105c864f463a502dcd2c556d94f1492a5f8a8c6d70fd0aa9cdf8a5d9d634eed4347fd7eb1af299bfb2666e23ec096f48ebe7d3c4e1c287b238a728637dd8a8280c940e94fd68abde39713740f29e490899f35738b92b8de4b64943f90ba5e965e8f83436ee5d39953a0f90a16a45f57b2d2f72695b1573b24edf246ac1337f80de04b9865e1b4d1d557b5f6e3474419691bd6919d0f1e244c5855e5296de4c1f26c6c9e08f547880ae207648fceac8f0c42c570abac1715203781474bd489382842f92178f88e642a0b0364549ec3cc7ee141d68b77bbe3bf84130da0990a4bbb32bc7a8a24b2adf60b2a4c6fadef6723ce5209e522ff465bea7d6705b4a19584152c255f16497b6f5e17fcb4aafdbcc93f743de526f022ea9c1a7abdc2d0f5f511a5006d493e9fdd492af2efab7e51bac32a08b063b84f71d0e2ff787a06304dde39f187add29c9bb6faa9a6b83554f074736e1a5bd4f7ab454484b3623ea59d8a3415a565d52b9db4ecc1eb89cfe15ca7868f8fef6e6a541ee16a917a000351b133c05b4470c96fd4af4357164e07585b1143f02641a66dd21ed082e411b5b34494cb2728e3144a67395219eb55831e37680b9f143ad2dcc9ed08a096b4807d410ca8c6852784189ed23d97f51cfefa73f41a94830a2bbc866b59e76ae092ecf5157efe5a0acf51a244d97dd0415836ef39494f60ad57585c633ccc571e32d84e66fced81149637c05cf4ac325f23282e8a70efe47ea55291b509f545d1bff910e86d0df5fe062e0054d7b26c1f1b6e46200868eb230dca4bf32be41e7af7773fd47642faa8812db396330f788a61227ff2c2bcf9735cff851d09c18edef65ab8e967d1cf6ea1da709c1dc3d7f4d49e36511b157600620b18128a253a6703295a26383eb97b6990bb01102b386e8eb1defd81dc83bf9443d25ad710e198ded09944611a7ad4353d71461dfa7774ab54e8c8106ddff73e78eea6da0c6871b412a17ad6e162bd9e73c5c403ad0fee77637477926a1db04c721ad57e40dfed2adf360c6a0c5964df83627d5ea13b7449bec396b28e1c8e4727b7977e47529243c4a37d324e86f8a8395fc0e30b68d61a85adbf1298f4a634ddc91798c9256a8766214ff3696e4898a056061998c90250913ae763e4b9e9ad9a310df570bcb7ca4e1ac0ba2d1b891918e48862d9d375aeb5d949c9a94240f46b9b1a9be7b10e0e765ea551d90664e2bb1771d1a4bf3b9825dee6ce8ec1f2493de4fb59e094cde9e63346be545405edab361b0235939c11c65362e69be6f8ed3a83aa799a2168ac6cebc0852fbf205b5b3e8bf19f5636995354076eccef628f8a81f5f970291d1235890e6d76430b94f365a08253cc49de6b9930fac65fdd01bd5530658dbd033028a734c2e6dae72011115e3c849ee74585f079fc804dffc2b1a232f032c2e1378e438ebddb7120c8be5109a1699ce5b07b3caf1c467969d56226587189bff9535b92468597c088bec3bff6af8dd61454fb5a4be4867399f52f1bbffd74795bff55b6a9e5cdef893b5fef1a7bd5c214fea98764002aca72d1757c2154b9e8165dfd2cc6274abdd878c4c88fb6de36d4362cf0cf853657abc78460117717867f24a91e3bf4c48cc8104992ccadb5ffa02c30163baf997761d029ae520f10a09b0351aad9b5d144681690d0b6b9f214829b2c5fbe8d7ea30c2fe068484d806e4c91423cbbe92e2b913cf0269fc9c1750dab48869423d386a506bd05ffd5bccacf732881c16fa431b97dccbe755b9dec3bc51f26291156967f2b026be87f1e2d6db7eeca61947754833d43f7c03d67b76e46205653fc8dd2afa9b7553b0619db50f861e603908f0417ddab263a057168275cc7c324a0a3581cfac9a92e378f7b00f39b07b4484dfb532d679c6a5128f8c30ac2ec7937f24c26a0f2e76d51de7805d99226b9a2971372ac31366f2cbd9ff29bfbac3f6f1be0f2b631dc6158dc38ce4a677cf438e37ee05c1d8a79aa4019e7106f907210aeae3a625147983d5a7db9fe46f0d068bb12908ac4b2012bd2865f50ec9b7472f81238d3b1bb6cae7b002308e9c1b18783e385b7376239ed0ccc067260390b4aab2064df21fb70706e9f6ee3ee9f34e887e974503cc808256948ec95d68b686d56ad2ef3f177380f8cf698a8a0dfab58c076f1ca698e6d87c554b6b10bf6292e73e9e41dbf49e1405684c993cf2eb3da3f8967931f57d79ed263a9bc9192e0d9e05c15c532db8bb7c284a85ff40c961b8b8a782e1c27d5b2d666c086e4050444963dce04df9a9c9d140a30515e51aa54a91314d501fc98c6fec43871164133002bf0e8d4d299b7e8dca6e34e2e4231d72fa4afc666388bff2ef09db9a4a3618aac8d741f67dd77fe23ac193cd71976400037e99a516bc36e0f6f6c6375ab00fb332df41606e606cb13e8e44c8da2b2bf30d08afd9c41623ae55f365009a946e7df3fab0a1748e941737bf0af80ac2dcfd77330be61ee9936600ebb9f0a1a3ece6ff9b9ae0e9ec718d6045c3e40a04149a1bec3cfc4b8313a241f81b5086f6d29fbdc96e222a1cbede611e608fdc7df574a1516e4345f03b2b55430121a63429760e49014a90f2d945991e6d23e6302850ba9d9d273b83729a40e49b7762d1dfca1faa57a99f496e3e0341eaf4145a97ba9297b01fc9fd80454824050a7a24e382748cccc2a3d02a2a24fcc9a6729d1b20433de840b1caf29510403bb1152f2d52f3c9f796f94700b6a3ff438c168fbbf75ffaaebabc22e90f6e6b6dc294041788c26d8dc71bebd91d60548fe9a2f5d980ea5da354c7602c45b0684eff8cd01dea02386ccd9fd9a4e73a399addcfde23a66cf8bc89490f3296b5a9c504002ccdc7e01e581f5fa2be3a42a0d029fea72f9e100747e501fcaa9af255538c9b513395bea82757b3156ac3a47287b86b9f6f10d8183de446c9ec8a9ec845631f9027a77aee448dfb4cf624214481ea15f5bda70d534dcecb12496ed4627bd6da6c059323aaddb59bbc7c4203ca6fa972175ee63a3b51ef9078c6c3896e52a957a742d558d372a5bedd02e892e261f8f5b7c7db19edbdc1401cbe5164bfc5e3d47f3b21e19f9115f96d461bdf963f7b7b76e7e5f976abb91455746722ac6e83dc5ad91ed43f47a76486f42ab2748052dc3a4ea9ba10bdad91a75ac661e865f3fcd3f7998f77abccef46eef7b4e54b3222a9431735ff9fd0565ecc94f116d3e513e888eb7eadee3960c8f16c574876369b642cd04579c36edb9682b53009d72ada0d5a617e5167b6466dade928361d2eb8c745419e6e82eb6ed7c3bfb70972224cd91c620b89bab172dae0244aa9c15026fc8e9fda85d562768eb3f710db35228d01dcbc43a73437bb3c9fa9b3984785daee07217f60a72838af5fbd3b1f1af69f44b71bb0a85e7b0c4f5627e2e9fe2e264c1be327c616b795f909582b9304082d1e2dd5251b384db41962576fd1e3ab14fdd0f6bf7fc7cd996b0786007b0ea24d5a41079050204a03829377a90da183de74146bb6855f11a4e4cb3d4fb77efa76bfbcc33586d3617ebcd17ec22a8ed79018f33bd777b85d96e2dbff37ef9661614ffb37e12c95981757156f9334a2e974cfe0e8e62c68ab5c4ad760d7c40a0b3ab3edef3ed241de5ab5b4e309c0f27a20b48e45bf21a62f1772b35e527736aaffd5b1487a0b3b22c512befef851e74200707f895bc71203c0a57195ce0fadc17cf4c36ebd33a5350535c9f697e00533cabca0ecc38b8d353365d792ff0724e2d70d84c5caa6b85a3ea372032fc2d786950f559034ed8da444f9daf5f0284d1dbf4ef396d16b5412048c1d2b9dac7e19fdeac63b2972ea0360fe8737baeaa7be181990f3a09c34638a15ad0b51702480baab407c42e13fb0c2c9461de6fbb6f82a20496d3f282a1deea7cd5d1fb0af74b23d9bd6b1f248137e3c0d363e870d6356cc3ad4db688db1caddfebb95776b11d84935f4ad8ce6aaee8bbe381c01b87f434eeeb4282ed3cd31507489d45816e745895ca7fffb7fd386b57b15cb6fb3ef4d174d1dbd6bed9675056a67439da9585342ede74719db918091a6af14cc36fb2a895bfd37490173cbb211c8de45454926a9c508e880a181cb88eafaff6f0bdf41251e1e3d2b41d3a2e14e00c91d35dda91c4f23334c92263102632a0da2e4245fb1716119ee9fff7f241d249fb178741a4dedce1ba7cecaa0b8842d06d3cf0c1bd9a609e35da9a54000a83bcf017082ad1f3b105447c46d12e9d3e82b6c66c4c572c7f125a15c4cff19f02906e42add444503703455e0c016f700f8f124b8dd93e013c0f2e940fc2de1937c082132216126c2f953a236261cd263ff36a31ab86b1a50c544ced7e92d81036745bd8496f358b9a43a873f78b1fd8ec34153528da6024d922ed25dfe8f58343d3f5a4644084153259475c884785005a157daff0ba84e7acf13ddb2f2e996013ae4b7b5abca0a71422aa0f55dbda312e98de95080fc149803db2a5efc36806bf4baf2ea2b94d06ade3fe35a5946563fa077ffc735b25b64c92e6f6e5838f0005b7bf4e4e494df3bcc282cf25fa5f0baec334c73f568debcaa01c1dcd4006aae1b0e0c069ac9bbc66a957092dd0a1792a843f4e4478f31e405b60ca2031085ed03aa02f2fbd31a02fbdfb245a145d90fe1515402ea2b38dbd5dc8868e54d34229ea56f3db6c7591c3c32dceca0fbb5184e67b0df4a3bf11a63958806c03bc9deb56f5a24d464ac9793a6847f9ab2739ee962fcb5aeb63cc6f8cd64a52e207e5bad73f1c705cb41d9fe8476e6db3a9d8e72c54dbe9d1043152e8e22269261770b9b19c3ecd855dd42285cfa87a17ea7ce1d3b9c36f9f9b8bf9a70fe6d26ae312ce741a4d0960959bc97ff5afde4b2b29537636ee23842e2ed27492d79cf5fb0be833e21571a77a042ace30a01efe9dfa01428b2ef0e6df0dd73162a9fbe12b6b9993178969a9e2de6a52aa342a75cea64ae8b19ec48bfe8da0396d74335bf59185bc579d18d64df5517524932d40573affaa58e2752ad457b1ce97eb2c4c563fdae93cac81d381806f77cab53089dd1622971747c59906d63ff9adc812ca0a4f0e750d7328d6977026eaa5af519a90eb20921d61fe9462b9ebc3403d07eb4a39da5ce8dd9faf4baadfa4eae25bb2621774cd12cce5be5de01cbe8c57313bcce199794f76f1fc4d33c69d1c4484365c576423e337b57f2a6a287f633e3b422810e14dac0322952b35cf922b0761f233cf46e3b9431769957ebea6a5c598d3de6f0d592aab2ea799607829d11b1f2206452155d3e2c0069f16f568995fdea86eb1984cbde5eb919df3207130b875d6125a0468282f893af3630c1cf889f7928c8df1fa1764480182ac61ae7f0308a8cfffa8f5b8dae83e8c9a88387c1a16bc405cf2bef8973bb32e912a449dcde57b5804f31fb07bf31fbf5c207b9597f53734ced7036770f451456d8f96f2dba8c44334c33db341ec2be4e7db97b4d5d069e96115c0c13d1f30448267d6f7aa41658c385eff9d1770532d08f8a83b69372f049bf1cbc0fe395b4021b34a8d5666ec8d51c80477442ab11de36d2f1d784840d437ae69c6308e0048939490c75ce9628c16b7110906fe96618ac295ec7de979e7eea685f0399fdb8725670605038932acc59b5235047c32d8fc495a4c3a4136a2cff6cd9491682ddac19cb5011367b915508552002d75772d879a3058132368e8e0de2eb521802ec6bce301ccd6d522bbd00438e83ae87620552104761c08f3a4a8239b1b3a825242b758b8e88b18b4a651af7dedf98e1ac0f5c29cfe99af10e6e1a80a991a15d5ee29aedaafb01db3ed8fa788a22c0ce2dee5a6ed0b36379e65c8f11adadc183a11466cf02ad2163794e91b7eb33667f387f6510fc213f6a79567218b9c2eeb01d39c70c35d7bf304352733091386873031801b6102a020712b9bc6c587901ac23134de12de7f12e92bf4c9cbcbc4c4e0ba2466e4cddf4823ac56739ffea8a63a31413fbd7838304b816cbbc952e5e7fdcb93e3e36d364f5614363eeac936f0b976af99659ed0609d8e16e3ea054a109287f3410ff34c559fca069e315532b2a0aced29b537ca1567283fc48761cc9b159d855398c765aab391c9392ed406e281d6a88ef21f953e1f48d60e077deb311179381fe218b72377664e9e6d63c99b1c0de1770355646fb16aeb59c02a22551948fa46a764a7529a31ef89ceecea2d8f9f409415f013def78e0ecea9f5b30aa4c4a97ed90a418e668497a80405fef98684b24aeecdb79f4eac8876d1f78f3eaa5e0408066b52b337d30c3a9a8a17e7dcadb1171e4cab6473a5eed98a0773bc0faa0ccc82e8aed8fc4a41c59b08eaf51973120b5e9f0f34d46bfb4610b77efbc33339e97b26bf6734e783388cb79c41381f8eee7149c422cca7ec4ab63ef3e80eacd3ceb6dde71134d53c70ba1a834a69261c84086cdcbed1b67127a73843c9243b7f8306231143fd45dec5c4c101a8124af49b689c409847792d1b6e335049bb7e2ff2db3c60dbe0df3f9392a8e6090bd315fd10f5807048c7fb90ae8ad940b8a3a811df1678dd58a2390a0ef1ba511bc63bfc138e49ca1e6a361861f9d5605de4c0450a21f90783afb1a9e9d478155d5c1d526754130634b83415860d9409ba7c474f39787cc8762054931ffc1d652cc40ceeb7c67906a0b77a94dcb686fac6c244ae22447449ca4c9709a4562faddd4606fce764fed67de565b078c160de8d0fc421cd7285a6ca4b8d86e23fa270df5fb40d46e729c39c6c1a8c4c134ecc72c83aeff1116a355e587eb1c24649c629338af69d25e0c04d39aef84c7eef64049d9d0141e7a4f05b383a11165fde8dfa657b2d0b4e636cd56a019818aaa90f63b63ee7f89edb96bc8db817e4952419b06b078591abad0e69f7b32998ecc97880ff1415e05d5b203a4f662ce5e14d89fda5dd6d59a93bd0058866c07bdb9cdffea129c4c37928fd5bd7a364ec68dc5736f673c264af60084069adb917c505899e856c0f7b1e779a7c735691795f98a017abf34aa4ade82e23617a14cd424126be271aa4436f19034880313981b6e4069a07565a9e36237bc7d90b30ff5760d46276c4d00738f3556b058d69c677cae7534f5ab2ff7501c45352b26f8e717e4cced367ba68999a5196a896a50653fb1b7a33ef492cac85dddb3d31f8c94602596025f00ddf4bfeed1a9eff3a012773f8d72698eb90511c896c568e4ad8854ba1b1345ee643baa5984458928e4fb4ebe11ee2a4a021bcc1a84ea8d86e46d88d32c69429ce6388bce1e396686d441c2732aead832c72bd1c3ce6bb671d6539aa61c56d28d3906aed3925d45e3b817d73bf1af33c82611411707688e301984cb297d566f94f0ec57b40d78ffd3061fdce015ca4828d050b9eb0626814051c52905153cfcdd2611d7b30d06c7b791677a36cfcea132e328d29277d8e98a333571741fb5a4c508c874db71b7972e515676cbe208fd92c342a3f281daf1b13775a818563aa8e843b6c3d87f4a7e5d26b9bd69b10cbb22f80d1a03b19114d636b8d5eb1ddbed2019da0e6501a7246d65ee8e3efaf7712e772de227cc2704f780b6205f108ab48665e2607e6c4e9ed608a7af61b01653195dd7d7e31f46ee4ee918e716eb959d295b19bf21000bd5aaab4909ea676418ac6e454590a1b829ea4ec23803bc03baed50427bd676510dc7d6d33b7a4c7309a2421f3d7c293376c76d63a7cd77549db35114cbacdfe2ea0c7a6cc5672f2ecfc8aeaabd3d5489aa9962d2b664f0070ca62ea503bc90fd894f9e669dc8df7312d177b9cfd70c9372ce754a347920e16bee6975b8a84ff10e3851c0fbe5e386f2cb10ffc9f8e10b9329aba1ae0fb439c8f544aabb4abab74308463000a992156f53332139a60e97ecca324acc294b23b70058e99d4f8cb5a5acf2a4f93f8c924196047b11cae2925b3463dcfbd565664572a2066239d725fea15efc6495930536e47db6ffa5b4977596bd208c7c4fe792f9a3f77cf04ea9b03eb429c99fb929892ff323779dd5d32a613e0b6fa0edc765f6a12e34173991acc9fdc502c675259274f2620a119cdf36ba502b8e568d92626ddeec79c2c2b25c5ac2bc22b9bca19ea0cf1e2f4f966d68ce7a033ff1d072cab6003a79db77ba107edb2545e14ec939d4d2ff68d128466e5fa2390cb91fb1014bd8268d623451762ae64c86252854a99200aa8dbf11de2228bc1cea783c521ae2b867b4d771e0df99498782c4dafc619945fd96c2713bf795ce703516e58ff296640ad546acd54f7d32ac819bf8ed559a292b7c1527753fd8e2641918f530584a5f785682827ac1ac8bd9a8dedd62f908b446f9e413c9d636160715bad03cee799a418e7ff033f59b507b8a3e880b098b06bdfa2e82627fe7f78a14e77aa74aa20902887944f9419050cd4969985ff5dc238355013f3e882d801d25135029abf85753e176603bb53f62008d3f6de0acbf45b6d09808b0004573aad20d4e59cbfab98e3f2f5a6c17131884eda655e91f38fb46ca1b94a0a55e41132801e409b689174dd6df23360e4533ddb3592d2854436a15a2b695aa18e48e8d1afd7ac607fba6cb576da1fbeb9c94828319a60b1bc98c75a408601b79416b00eb73cbe7a3903e48ba26bffa8b96fb6b381589f8606a5034e2e2da1ea4c4c86625a27d64dcbf10e1d3cc0636ae9099dd4afc9fe7fc68492971378e15a46c4e3ae95d17a6573eb37091b39b56d21d6617b0a7d0408f219bd3e89c16dcfe27e51da5d561400b6175a40d87e3270f728cf1c9a07abc3e4e1e1bcd6b0ba02ea46c4ba2afd0ddd198e286bd2d263ddfe72ae4b3b918870d29ae56f8950ed5d17360ee7cdc2600d94fb6c1a61e42b9eeb56f3d498c36d889bf1d312b140385cd551f8724da6dbbe0c0662f5d04ac406aa22444d99d27767da9ec215f73be5af15f70c23441eb8f96332fe3d76468f105dba0b047d69f1866d719d51beeda09ca659fd473548b70c11c0406511bc3709a5467b1e13a3c05bb758fa71ae36d2e5a2ecf082557c78a433890dd96173450498a104f8c4ef626f6dc6a9da0e5aa285f6bad8356864fb9c9b4d0fd00e2186eafedf4d0fec459793f9d3c493302ef92eca08e9c2d9636c3d6f42c711a9472665a30d467b99dc3b7da348cf1ba34fd22fff1d6a50abfd1d3069ec7749d4fe5cd4cb97e14298012cae586dedc6ad0f6fd74f6ee3f9f83f60701a86b3cd5e9c8047022efea2d05e72f8be00db1ef2981c2a0e63f8324c334817b92c1a6aa700e44161d2269f0bc3963970344bc319c42356deabf49572ac7d36fd5fccd98bfae749a535ffd01a221974edbe9ff7ce0146937788573bd962f6a1320655805765af11de2e98d7bc93eaaa9bd62ce21e5bc68cfdc688fb3c543f38fd2c365873e1a7c738e0c836152801bcdae4e33932cc24d35d7182a4c0614fe219ca8c20b41e095c5f3ed309cfc926b83562a740661fe92b01beedf43caabfd097ee6f770f2fd7a28e80bc6b1b78f972d26280f53f4b3172a2396fa0936019f77eb1560bec06babb398cf20a1a9a6ce3b4fc738ac2c658a3a9bf367724126690998f76f900627c81bdb0e9fe670c386299d7c53d9ebc5c62b563f94c08e45f39100851a38d35090342cd709249f7f73d099ae8e11b6113ce88269c518c19a0bfc7a8901e957da221d97cf730370b1d5fc1d2bf562a7947fe8fa42dbda27a3fbe7059c901ebf99031ea6b6ce00f46fb8293051916d08fc27473c690e68e9841e6b10edc0d3ce25260bf320412cda3cc19d7bf422d846980bdbe45040c44de2164efc922597fc1dc828d6885f01ec1f7bd53a72c4b0e64baafb64c86185286d5387875c7b90c9d299e717cccf1980d06772992600dbdd2058a8f8f0311e7941d3cfbd03bf278845fca23b722348005cf87ce189b64568e9ca17601c25a7f16370820c4dc81bc49a14772e6bf12cccba660745e22a717f981368a9773b361d339a7b560e96e74c5220f7ffbdf832834620281df23f4f35f64f820bd1e1c8f6728611970e4bdef7835df5669793452a8b7f91da56f4d2df554e180bd66ef6f977b37d685a00de2bab04a2d7e56fe1c2572fdcf4b78cb99f8139e95e2ada913476ea4bebd7fb027b4c124569a55acba24c1c22afcc1e5c15039311cb3d776cf4aeab969a488de187ba335f3be151e3e6e431f138fc0f05ac665441ad4a46f63156329c3b93773a0ad7688de5f2432ac4d31611ea567e604d31a1754fa67f955c735f3a35ffad3ef55a94e6b57b51849f940e811ef097ebe9d57ad4ba66bf295dff7e9425a394f826feafbe0491b822395de6c7ac80532919574a30650eafbcd7c9c4e4ed3d521d6ffac1fb747029f2c5b460c0a365628b9b647c438df9c62e3423bd0c3e7eb000bae1a9e8512b738a6fc4aed6d9cfbb784381bef8e9cd09d46c949418894ae6faf9a8712927abbddeba80a050fabb34eca4f2d65ae16ca5fe27b5e830610fef5f0930b666c0674f7a11a84684f979e8b113b83495ae2fbe1b65ad4896acb0b6763637202ae03e40e71ec9abc9c190ab347507a32ea217bc7986e1cb368ec81ace9faf84fbf77b4a3a65e98063edcd007f37321ea4f6f35a2caee33e26feaa294c86733d959691d35ad21e11da2e58d7f3d701357836f53f9e66b5e30b1443889309b2fd515c1a67ab49d9d4b907e9547a43d1fa14866517e1908ce46e2327111dfcb33e62fc3527308c3e3c5d0aed19303dc7a3b9eca58fa23498841ec4638cead09706b8b6b142c68b2ca09e95f4c319ea85f80a0477d365eedf47ba23a1eb801258f9ec64dbfad58fd29bdafab3bb66930d101aa162e1da1254fbf65e90a3813ec5e9d617da9f294448dd0622a15e255659b2c137a12f45ec98b9dd934557e03571ae9a2d4174e9a6e53f23eda18395cc84502c014f353a5fd1471323c26ed6df7aa97a1312f87ed0b6bdc0ee1b81b94fd899e225d20d7fb14f356c3ae9cf7ccb4978884a50bffc79cb05eef31c073f4f198508d20dfdc8087eb4ab23bc395fae0b61705988d9258398a61b07234935f95df3ab9ba21198017b75104c7f245f52ac5edf06c990dbb4a69dcfc4a2885e4f9e298d097cca84a3ec78715cb72c0f8ad1ad58353e2a2e37431aa20f5b4e76c04b6cc11e75daa0c509c1c5422aece9189943fd", 0x2000, &(0x7f0000007240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:32:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, 0x0) 05:32:24 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1004000000013) 05:32:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) 05:32:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0x0, 0x0, 0x98, 0x130, 0x98, 0x238, 0x208, 0x208, 0x208, 0x238, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'bond_slave_1\x00', 'wg2\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x0, [0x2]}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400024d, 0x0) 05:32:24 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000001400)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "112edd9ffdb53fce3c96e763917c9fbdcd3ad52e9dac54bbe672a8afe9a960311e55b3c0727e6b51608e6c5021badd60320f7b319500ea21f8b884fd0da82065a6de089c5dd44ae636de1fdffb850333492a513019278158f41d5aacce01eb468d477ed23f8edfc0e9cb4e8a2fdb5278421fdf2028457a21a2b3324b7919cb4d568033dcc896c6c9e14515eb7b1a2a02006c4e5a7a"}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "cf3f2312f9f657742a52688e2eb81491a6c1bffb46eccc38eb89a92af7922bad914b7600c432f8cec9a278cc99d9c6f151440ebf2f45fa3c327bddfbb8581bcf6d8e0bc9e16ab1622647bade8a75cc3b1c"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "dffc5ad03652c35699590f69bfb19eab61a464dee8936af2db4329cfd9d823ee1f6e0c5063acc31aaf88bc38c48516e42aaffc48f47f7428ad87e49e20eb24079b9fcf17a8bbae0db9fb0e746c4be8d77ca235c80857e62713397e71e200adfab57bc12fea7715a15e9b96a2f85ae1fba19c2c96c4a8e1208d046390759f61708aa5615ee8fd442e5a507fdaad9a1614c7eec8a799a3bfcdc4857f1bf6a3f0b7f552da174b3f73f4ee88a2a546c2c239b3"}, @ETHTOOL_A_BITSET_MASK={0xcf1, 0x5, "18d8eeb7fd6a4f9c6e576fa7711da2168e6be61bd878bf8f44139de000b92b9633fc8ff155e2a2878bd645bd0dad5201a9fc4b7995eddff4c89f783ba178b068dc2edea06f6bbc5c2757a657e1122c2a42ee58c331c06b6d6a9cdbcbbe755b48089c2970427e6320bb68c868878cc4e8a035ae4e02f3b4288cda0c54847838c9ba34a6939a316969f9b55ad50ec1fbfefef8ae2fb13e80bfc528bf1a6eec4f7ad47f8b8549f6b81471fc734ccad937348625c9784cad79e8108b311b7ffd254d443f0af052896b0390e54afc5db5195ca1930c6fb5f1040bb1924582c291f87875c35a3aa1d3661f14226f0f2e4d78ab5b2a98d06651d5c2d0b27b550e617691a30d1609fa9a641d6e07b5f3456f89288c5766cd77e7359d279d33c21fb43d8237b7b1613c7a2bf2dbbe2d682e56395f73fb9355ba3727b77306f170c00e19a05b238ed867d55731c308c38a3498d025922f966dcf287f4e03e916a29dcedf6516cb9782bbc3eb19feb612db90f06d2912ab15f50a1c445572ff778798cd86001a1b13a9065a0f83961ae6d635ee2a9af001ef851e10fda585bb92b2724c04c83fb13e4585f964329fc1839050c1b0a6132e8ff445fb946476166051355e432910c94e985124d167077f98817f2cc040fdccfc43b4d79f4f2e40e193f0dc29410a2877ab90a1150ba651615c2a7d3f063271d1cfa6edbb3e9cb758371785349fbf94a809b367ffcf784c74aa40867718ef3fa3b902557b5fbe0a344cb7ee50aab690bbf6431648a628ccff92aa1df96bdc87378b0fd79140b9c986d402d1150623f97bae4b5e28dfadc5e008bc00810e8fe4c5341e2a9791e5cb07a4ccdf52e8fd80e694d71ec4eda6739188bf40e46dd1fce76ffb7b53302c9c961394bc87a126a19c6bd7ada4cf2bb8bd8535eacf2ffc6595a997e64ed8230f56884fe65706c9cea25ef0db6c24fc2c1274c49f7646b798757006f066cfce7a8c4105ac09b9433c9fd172a91b4fcc3e7fe8def946e35fbe17518c064d5d4214d31cfab7f67b74a46097751e4098048916ef54ebdb2739b85829e91060da34656bd04979f81486bef61bc55f012d3a0f0322104fbabac5890cf5b72c500f5ba967f4a865d4bb57fa2ff6426d590c4409069201d04bf23dc30070e84721fa386d4ec123a3966e2e37c1d85f75f7a56329d8b4227a7d7131bbc9e2002121f891291aef6a3291241ba6edc0ce824705989bbe4c145608de40634e5e7b0dbcec8bd935b13dfcc21b25825e24ea266d2eee5a04c46ace1bfa9db9f756a3ff6517d51c287e934f8b2b538b3efd7eef1712e0e69a8b201f0ce9365f3b7186702a700e13ceb042a3058c124e1b3133f20a6585e1561d3273d51c645832aaeeb7fe8d4f43c617b664f960ff73671eac9c8ae47828ea090b2452e67d64297fa772c3c654973b893c58b41bd978fede234e42009cb7f5bc91f91f0b4315b33c165ac378439b6139815479ca8414215e198894578ef32be72069a6d288543ee4cde1bc874c269cf76e2b12551bb56f9012fe53c84b9ac9793e63a9c8e0000668c61ab3935dbb60f03a561a3c05dac57c4afff0994405d45b76e14b8164bf5ff01549e20610cde7763a6501bf6ffb5a9174c4b4e4b88a6bdfce36689fa25c0d6dfc7b6727f7752e079680d53ef4196842b5cbde13dcb625e47e145d1a0f18bf5d271580fddde78b676a7207096a1df313904b5dd0e39f9c8ef12611d689f9bd16ac862336011cf4ead9b915fbbd00c40a58928629460dc9fc028594f6c6951cfe05fa74aef3ceb139ef622b1bb420c21a5a1497c0f2670b0028b39f6bb34fe805cf8a1d117a28f8fb689bb26248e2e725e532aa90b6c2843f32c738d9899c65ae6467e5d66b6210269e16e41a76e9ebb3030d7ac1116316f0e349534c0e74df58a172d8882eb76a12f337772f87d71ccbc7c747eea361de713ff511dfc512cf7ca99a0f4c43acfa7cc04b9da27b93b5a25d6e55270f175fe94785583f82706c43d996beed51064c8f8364a597d663356de3f421ca50d02a518213f106fabdfb6864d6c3703cf7a68f17103979c0fdd88ee06e1b19989c33a0bd7351476db97b6f204c37e9aa1850d98bb3413658e81ea83c1ab4129106e15eb9f4b4b2b5b457670abda95c466e8c5c4b8db0e78104929bed1d0d54958d59d158fb4c617bf091498a8484a5d3c1174da42d40b1bace801cf8d9f0a3f2d1462a6f3eb716bb7b8dd5dde3bff9d37dd93aa32c28384cf0bb114aef4b5dff566b1b4af0fc627ea0689325c7d4cf584cec524998642cc40c5202a7e472753f2373fc0c1242bb443a1333268a3f8b8a049a5fc6b9c096f4e770e9043ef29e406f931ae5671d26f7b978838419f6a24dac0fce1459db73f5f2007e412c5f0a871b808bf22c2d8597dcccfb8797887e86b0c064a79c4ff7e1bf3a45685570087611521c7162919d3820ededd7c2742be680126e06bf32c143c84af033d531ef7316f81f10f352e49266561b23a441ac88bf0e77de8e33a8cb1df70c33e9d186126b530a71a8a7c0ff4162bab06d1aea3c20f5c4446005b77f6e032294e8556845704f0874b503caab78e42da31c10f1bfe6bc1fe4843a75167f86e567630d05079d79dbbf3822efcd69efc00cbf9d3f2cb18f5b7e760cb18241bbc3a7bd87c636644c1505e804187cad12218dc5f5ed9d381fdc97be758b9e2c60f865d01af64d0e43cc27fe9249335a96d551ea155d0050953131ca819310e26c7b90ffdb0705639df31867a5e9e8d44aa2f11ab58dc1f22d73c26a5bb45cb4a893c3cf852bdf6422005ab97c1509b13ce4e078a1b3b4708e13670f050c31eec24a5c2dea8443466959f45efeb531b00b2487f2c282f6c0a57b84b68a2847c8d3390f456e917cb211908ad0952e66c7855be3f7590e7eb8fb6b1aab2268bdd8cf4229cb86b38770c1b33795a77370fade246eccd1ff819549dbbcb6ec5cb2ca202147582ea1f8a04575149836ef296ee790a311bf537493fac569701fa4f46004dcdd191332cd8582e857cad887a2148a45482c625b884db2f042459abfe6fcca0afa7d68e7bfe4638e1a4fd531072b013ddc25c9ee742748e7f94f36df3aef6be1c59c4815b36c6cdf222e2c00347876924364ce3354f2b5e68b7d946af63ad7f286648ff4b035ee39850525a0ef70e7ce1e035a0f3079c3e8b91a5070fd7a9a4122d216e222478b747a8435fdc6aa71476453d0373052147eb2cfd2f3a7322e4c51e6fd499d764b97a8b13b220513c35ad097c3f5423d17b92cdac776eda00deeb053ffcf1fd1d56cceac485a89aac6a7059df76c3399dec7726a57eb3bbbeb11f9a0bc45167ab55ace0f9a7fc208e543c58804b661061824044741020c217b1b797498d2bfc89e6b6e11301fe5561bb54af8045053c249c7495d8257f6a6361f2e9d95a7cbd85626a6460f4537ca296d260a6f28ce7b03471254c4ecb18d1069a0e92bd18cee0308201b3e044929af78a062db74c643c8ea562fe0af42ef3c1d4fca2b0497a107bace90951018085b64b77b522d2dd01186f8fb90c3cc4f684c9e39f9a71e7446eae74c6483ca9350eb2b37301732b779bc3efc1845e0322602463f5ad69acd452ce658b8bac8f2d420670673be3ccbea0d02036698d6ada7862a56c2a359643d7172a9f0d1272a85ed665207b440ade53d7cd4b87a494cf522d4ef223ab39df2d226711f889b47df7204bc22b305bbf639105938e1479542f488341a81697296a3f49976a7c9927c5e12d382168bba33b9169079edf7b4984481d0ab8bc01475805df1d0f252d4caa5ecff9d163d15b312dc92a3c10f57eb71c555ab67c914f117e04944ed5a981db37b603d9f6486b36c783fc032654e068d92b495a8fa482c20b52eb782c3cc35844ab226b35249924a00684f7b0de21256e120631111905e2cd5cd2c97eece8c457168286ecf665c3f3a1e2b9e7236741588744ce4849e979ceb6bfd4dbe56c469671573aec850b3d1aa7bc3aef59fe55a84f6fa24f42b056f1327a45508bd7cc5898466f31c1d4df78bc31aed4cc26ba7bf7d3429fccb2160c2b2d17e24bb935a75a426528dc71ca5a1f965c7bbca9430590106c02a51539eeb4c7b3df50af0128b4c295cbf802bc37ebc106448d6802db211a2a1e8602702655feb0398bd5c9ee2783ddf259fdce7eab4dc0cad3de6c445a844b390f36f8221761165caf49bb0faca0c0c6ee138f55f214b500ed5b396281333fc6802f1217da85fa689800350859704e96b4310757e3785ad28f9ec6322df5af18ba87038910fae8746374f39605048328c15d8718099b9de25ff372d2e9c39b45cd26e7c5b782374c722af157864e813274d89edcccb1a3f3dfa73143392190b4fcf0b82623f8cdbb650049cd6d72428f506b1fd6ba4eb70a5710a1aff832c846763073543ef46e5819cad96dfef9467e17588605cdaf7b1b14abdda9ad07bc120d3f402fe5ab42dba90ebfb36cdc0428b145e55a251e552eb9d911b694eef82c1fcf19e6d6e8d388ecdc3e780b9c5e24fcd9ea3d61dd9344f8ee0308d04b3f07c187203590a3d77538dafeb80685b496f862c80db5a5859fb0ce924e5144c757f05852d8ed6c914e28b34c669aa2abeb69bbb08b2f796565b21c585203123c4fee0c46d66"}]}]}, 0xec4}}, 0x0) 05:32:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000016c0)={'wlan0\x00'}) 05:32:24 executing program 3: clock_nanosleep(0x0, 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) [ 252.584669] x_tables: duplicate underflow at hook 2 [ 252.592317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8448 comm=syz-executor.4 05:32:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe8d846be6e3098e4ee32fb6e7e1776", 0x12}], 0x1, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000020000000000000060fc58100f982f0000000000000000000000000000000001"], 0xfd3) 05:32:24 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3}, 0x0, 0x0, &(0x7f0000000180)={0x0}) 05:32:24 executing program 5: pselect6(0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000100), 0x0) 05:32:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)) 05:32:24 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0xc6080, 0x0) 05:32:24 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 05:32:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14}}, 0x0) 05:32:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000028c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002880)={&(0x7f0000001400)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0xeb0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "112edd9ffdb53fce3c96e763917c9fbdcd3ad52e9dac54bbe672a8afe9a960311e55b3c0727e6b51608e6c5021badd60320f7b319500ea21f8b884fd0da82065a6de089c5dd44ae636de1fdffb850333492a513019278158f41d5aacce01eb468d477ed23f8edfc0e9cb4e8a2fdb5278421fdf2028457a21a2b3324b7919cb4d568033dcc896c6c9e14515eb7b1a2a02006c4e5a7a"}, @ETHTOOL_A_BITSET_MASK={0x55, 0x5, "cf3f2312f9f657742a52688e2eb81491a6c1bffb46eccc38eb89a92af7922bad914b7600c432f8cec9a278cc99d9c6f151440ebf2f45fa3c327bddfbb8581bcf6d8e0bc9e16ab1622647bade8a75cc3b1c"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "dffc5ad03652c35699590f69bfb19eab61a464dee8936af2db4329cfd9d823ee1f6e0c5063acc31aaf88bc38c48516e42aaffc48f47f7428ad87e49e20eb24079b9fcf17a8bbae0db9fb0e746c4be8d77ca235c80857e62713397e71e200adfab57bc12fea7715a15e9b96a2f85ae1fba19c2c96c4a8e1208d046390759f61708aa5615ee8fd442e5a507fdaad9a1614c7eec8a799a3bfcdc4857f1bf6a3f0b7f552da174b3f73f4ee88a2a546c2c239b3"}, @ETHTOOL_A_BITSET_MASK={0xcf1, 0x5, "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"}]}]}, 0xec4}}, 0x0) [ 252.897134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8484 comm=syz-executor.5 [ 252.970133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8487 comm=syz-executor.5 [ 253.158290] x_tables: duplicate underflow at hook 2 05:32:25 executing program 2: clock_nanosleep(0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 05:32:25 executing program 3: mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) 05:32:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14}, 0x14}}, 0x0) 05:32:25 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xffffffffffffffc9) 05:32:25 executing program 4: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002900)='/dev/nvram\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0x0) 05:32:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) 05:32:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 05:32:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) [ 253.335640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8501 comm=syz-executor.1 05:32:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x10, 0x0, {0x0, 0x0, 0x0, {}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 05:32:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendto(r0, 0x0, 0x0, 0x4004800, 0x0, 0x7) 05:32:25 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 05:32:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x40}}, 0x24000000) 05:32:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101542, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0xc01, 0x68) 05:32:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000680)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$CHAR_RAW_ROSET(r0, 0x125d, 0x0) 05:32:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, 0x0, 0x0) 05:32:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 05:32:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) write$tun(r0, 0x0, 0x4e) 05:32:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 05:32:25 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)) 05:32:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 05:32:25 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400c0, 0x188) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 05:32:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000040)) 05:32:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x4000010) 05:32:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000380)=""/4096, 0x1000, 0x0, 0x0, 0x0) 05:32:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080), 0x4) 05:32:25 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmmsg(r0, 0x0, 0x0, 0x20000800) 05:32:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)="89", 0x1, 0x2400c080, 0x0, 0x0) 05:32:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, 0x0, &(0x7f0000000200)) 05:32:25 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, 0x0) 05:32:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24000000) 05:32:25 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x86404, 0x0) 05:32:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 05:32:26 executing program 4: r0 = socket(0x2, 0x3, 0x7ff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) 05:32:26 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x0) 05:32:26 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x8010) 05:32:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000002740), 0x0, 0x40040) 05:32:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x880) 05:32:26 executing program 4: r0 = socket(0x2, 0x3, 0x7fff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 05:32:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30140, 0x0) unlink(&(0x7f0000000040)='./file0/file0\x00') 05:32:26 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101542, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2a4280, 0x0) 05:32:26 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0xd7cede6ec60640d2) 05:32:26 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x244100, 0x0) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x24000080) 05:32:26 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 05:32:26 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000000) 05:32:26 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400c0, 0x180) 05:32:26 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:32:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30140, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') 05:32:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 05:32:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20042004) 05:32:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, 0x0) 05:32:26 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42141, 0x0) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x2) inotify_rm_watch(r0, r1) 05:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x480c0) 05:32:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, 0x0, 0x0) 05:32:26 executing program 4: socket$unix(0x1, 0xbb9cb41087b10935, 0x0) 05:32:26 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 05:32:26 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2adc2, 0x106) 05:32:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0x4) 05:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x80) 05:32:26 executing program 1: r0 = socket(0x11, 0x3, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) 05:32:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48040) 05:32:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x24008010) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x24000040) 05:32:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000001) 05:32:26 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2, 0x0) write$tun(r0, 0x0, 0x0) 05:32:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40000) 05:32:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30140, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 05:32:26 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4) 05:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x4008810) 05:32:26 executing program 1: r0 = socket(0x11, 0xa, 0x0) connect$netlink(r0, 0x0, 0x0) 05:32:26 executing program 4: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 05:32:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f00000000c0)) 05:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000008040)={0x0, 0x0, &(0x7f0000008000)={0x0, 0xfffffff6}}, 0x0) 05:32:26 executing program 2: r0 = getpgid(0x0) sched_getparam(r0, &(0x7f0000001300)) 05:32:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000801) 05:32:26 executing program 4: r0 = socket(0x2, 0x3, 0x81) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40899) 05:32:26 executing program 1: r0 = socket(0x11, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000000c0)) 05:32:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x200a4811) 05:32:26 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f00000001c0)={0x7}, 0x7) write$P9_RREADDIR(r0, 0x0, 0x49) 05:32:27 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 05:32:27 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') 05:32:27 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x800, 0x0) 05:32:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 05:32:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x54}}, 0x20000840) 05:32:27 executing program 5: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSTATu(r0, 0x0, 0x0) 05:32:27 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = dup2(r0, r0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) 05:32:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0xcc}}, 0x80) 05:32:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40) 05:32:27 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x0) 05:32:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101542, 0x0) write$tun(r0, 0x0, 0x0) 05:32:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4000044) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x20004000) 05:32:27 executing program 0: r0 = socket(0x2, 0xa, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 05:32:27 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) 05:32:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, 0x0, 0x0) 05:32:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) 05:32:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x4c010) [ 255.464621] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 05:32:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000000) 05:32:27 executing program 1: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) 05:32:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x8000) 05:32:27 executing program 4: r0 = socket(0x11, 0xa, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 05:32:27 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 05:32:27 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x202, 0x0) 05:32:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x98}}, 0x4000090) 05:32:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x8000) 05:32:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000090) 05:32:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffff4, &(0x7f00000000c0)={0x0}}, 0x24008094) 05:32:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x14) 05:32:28 executing program 5: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400c2, 0x109) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 05:32:28 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/vcsa\x00', 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, 0x0, 0x0) 05:32:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40, &(0x7f00000000c0)=@abs, 0x6e) 05:32:28 executing program 5: r0 = socket(0x2, 0xa, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 05:32:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000c800) 05:32:29 executing program 1: r0 = socket(0x11, 0x3, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 05:32:29 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 05:32:29 executing program 0: ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000008c0)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000004640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000005900)=[{&(0x7f00000046c0)=""/245, 0xf5}, {&(0x7f00000019c0)=""/157, 0x9d}, {&(0x7f0000004880)=""/82, 0x52}, {&(0x7f0000000940)=""/4099, 0xfffffffffffffd0e}], 0x4}, 0x2000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000005a00)={0x1, 0x0}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000900)) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000005a40)={0xb, 0xd, &(0x7f0000002cc0)=ANY=[@ANYBLOB="8500000016000000182b0000", @ANYRES32=0x1, @ANYBLOB="00000000feffffff181b0000", @ANYRES32, @ANYBLOB="000000000000000018180000", @ANYRES32, @ANYBLOB="000000000000000085100000000000000712feff010000008510000005000000950000000000000018270000", @ANYRES32, @ANYBLOB="2fc9245872ca21f9ef31b7260e59613419f67fb4c0000000202c9f9e42ade2c64ec732f24e7bb8025f545a65a94c3e367a503b298d0a481df8307b0a86dd41ad55cf5406426f59d38fe8149e00000000ce2274850f14fe72b72d97a7e7c0b1797e49f594e5840fc3a832276e6020c03be95c4ce5532475351d726b7ab226c4a9687b011d8cc0c82ace1cba6925631d73e5c446e21ae8d7696c13a3a9224bb7d22ec2e1d59059c01c8a9596"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xe, &(0x7f0000000100)=""/14, 0x41000, 0x9, [], r0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000059c0)={0x2, 0x8, 0x9, 0xc16}, 0x10, r1}, 0x78) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c80)={r3, 0x0, 0x1000, 0xc0, &(0x7f0000001a80)="236b752abf93d32de5af1d7d7320fba8bf330cfa47423ed0a1f9ddaa7db48ffa71cc10624e8a8f0f62f61bba9b972e82d3f3a6ff63ecf789588431e85d1aa9a73115c1d42b872713fac5df9f08e67b3d996079660223f8cd8e6cff8fc02137c8d82d2c857ee8e4e5714bbdfbbd2419d3a13a57064aacd1e27596eb07063e1af7c921fc9e3fecf0df288e360e95fc0fae80ed1735d4b4d05595dbde3c84b434016fcaf016037813146b11098c4bef85816742f61905f255c12b3daf10ce0294be086828835ff5535ef598be04776e651ab30a847be3bef912223160b7b2ae9dd7f98cf4e7b13ed39ecb6b5af1c33320b223d749a41ca915af258b681dac030abf471ca63556c725362f7c5832f583ed17400ae6f4235a230221994d081282982443502f6e4f652673833b42f414a46270bd36d66a2f2c94050b6b5f1b89d4ea68144a91a45db211c9c96ef6f6e87ae101818c4e63313436ed48f606c899a8ff982b71777cb244ea4c83439ea0c718a83a6b8fbef4e54d849a02cf855d40ed7b9201e4f5aa377a8905ab96d60d686dc9969b7a2b50b49923c294f53abcf36deeccf83fd6efc5f0741aefc7f2e0aef0ea4a4b131c34bbc593e9d642c143bf74efe7d3e88e12aa806a4028685337976eaa81604408bcae6cb9ac25dc197d8e615695f4f518ca1a131d1b42231f2503a00228af2ba8ad5356ade538b05a563758aeb3ed078c43d171ba6d85acb346ab4888862a5a2ebb4781217623568ae21e0ed8977cbfad696f73f9d54ad18dced5a35fe7d6c0f5436d909355f19d79657a61e3e7d211649279f764f718b07ddaca8ab81310dd8ac958c6fc91d2c76dfb3c2502056cf6b70ef604611b9c667379e89451becc386cbfbff1158b4561ed1c5456121a067cf20c7e745ce6901e8921f46f6f4f86a8e458972e04e18adc7e33281215fbab5d4f56d7dbac1d87749442a26eab882c72a6d913bebe0386ef57b301e6b8c27777989a1ca0aa0535943d7f67d94790222befd9bf7c62dfd613705a76b16574a25ce348a89e4be13b5beaae799e0fd7820c2aec7feb68b2f72060a3da38a272f29f42ac26676a19f6413da645bdd915f5e42191362732e5ab34bd81483f0690ee53de8eb19be0170fe25a025183288ca1013b902769851c07aa88407c727b5874cba7a781402f5fc04c8e3c999a1407be1bb6813b8ea68a8280cd2aded5490030b712e0907dfd2c0e2bf9637e2a3c430f52ebda681a0683b4ea6e85fc81b9940efba6bb24e56498c6885502c0b7c6d050dce62139127a6852f03913f5dfd7839a184d420aa9f8cd5081d366ae09139687fac0808b0dc8f5148d3d2eeba207d7faa4ee591efd0a4146258f1fcba9202452366b7ee7a13aadd4baf17e6ce36c497517d6265348810e76ad21d8c7404701efcead97e1cb61e0d77518dd1c686a081759fcf0ddf406587ae9000e94c482ee850ed4fd71b950405bb885fd1a34a5adfe84f7cb11a0675b4efe6c54eff3c167d5f70f8cfa6b4805f3285fe863a8191d81b9cb55a34485c83f27d08be17f9b2b841c79fafd2f2567101ba2c694484d020e4b5f88f2f5fc2b3636c67972665b745a5f735961b2f32082990e187157c1b902bcbb5b4e61ef505542b844295b699054043f134cb83a563540eecf64a49f99e2b56f5f199d0a9218cfca039eadf3e86124e2a509063aca94bd7c0f8bb10f808d3f08b685ed29655b870726c23c61d30f6663ad4a338950a23441e476dec426a04443eaf24487cbcb5edbe6eddc33f2f15a706d55582a0cebf4e149ebdc3bf35e3e2584738ee9e9556cb7ba4cc7f0977abe320fae9bf88c48d29d02f44c87fa651ea9f19e1bbe85d49937edd662c4c8d9ee5db74874803e6fbe59e206556863c4b83fb82b464d8360ddd7d987737f9b29aba54b410cf77ce89fcbaac383f28dcbc6c89f6167481ca94dc2e7846e5e43e62fdc95af25dba760f3b70fb878f64ac839ed24f541ca0202dc9b5f9c99e363ba3e4de2c4d47df7fbdd8335b7a5b4dd5bfcabc0547b17fba2c47c886a78ab5db49836aaeebf288d12e6f9a9d8e8ad249f73047322063249f58e20fb3ac8f41ed3781971d08b70de4fca0d04a87bd170cfb5218893afcc50d9f837019c3dae140386667dfd6cacdabc0571d0c5c560cd0b3e9c7a164d257b8dbe5b9053ff73c2ee1fbfb0923c84fd77929aa35c539eea3b6817510cb9dc3fb2d7f168ab1470d931d19c9192d9c9933fc617a4d042ab39e0af15b100ca82f6ec909720224e575732715021838c2725f978bbf341f17b96f4259c823f47657266e9ae5f6f4671779c9fc43a59b1a8a4d42e4adc1b291c5cc8defbee35178029a5cc48a7037adfcc41d8c6e8903d47bd2b62c5ff07b5b7641d8594f1274a9cbd1ecc6964b552d039fad4f6a9f079e32717448a11d0b87abaa9142128a0eaeb5ec3d95f6c0f335d088312cd66261627b4e204a69152fb81f7da8fd368d3c0dcc520080f3760110b26740ec96e40cd060190c7c89ba63bd691c973e67f1a07ffc5aa8708107eb9adc1f2ede3a5805118ba3809cee741627f0001f6d6449dbba1e0847eb95cdfbe27ad509f166284960a7f73f3bc6847703b111e74bc8ed51aa494f11aac048104359c94501c6a092bd66debceda82fd5d41b59657f5c4af6c757c91b13308bb3188f55527344b1e38d4ad4403eba2acf640d7954591625518377d3d0c1b213ee0f1f54b25964363b556f0e8feaf4efc6bdda3848090f12edec1a89b023b4c728750e010c2d1d5fe1fc6845de9762de7a7df9bffc373581138968c74d92c0e802efb61e985a9d14d7c924c527be818e5067e25417137c2a8f01829917d63422b355e3b352872983c50b8d7a3a33ec6dc14ef672220cf1dea57c9a8c60d4f321352998b2a001ed53e439411aca430e1f82bdd4d34f66106acb39a0e49590408af358153781b68a7d00d99f1ab928361d8b12ef6637228a91250e6e377aaf558a5f6843f9784f1b9fb82f5619963eb72cae1d141da31ca33b72fa6632c465e2e8170202fd5550788003469ec0f2b54905b5a1cc45e6c784104fa778685366c97b71ccf71a931d6233b1eab764355b1ec64e91ad1a460d6960de6ab43807f1fd29c53c21015d5a2137e5603ba2156f67c3eee1e4506ad45111c63922d6e0b49e673591e7c3ac4fdcd0ab9dd6bbbbfb647389c8bc440e574dfe8cea637189a22eb92c5d2bffd0759c800efad438c577c6af7e39a7cc1c91999e2d90ed7a30d08f318ac4dea3b19cabf97cd7fe1ed511f1fea8e0c429f4b28bfc02aa158eb0b10401555346060015d871cd3687c12efeb5703312c5be24c843b68acd3bafabac9e373e4d7a2042de16877185277aa40469c947b874eb27e030cc1fb489fe8a273692b78a2c32fbed74b84d0eadf6dfa2e9f9101702226ab9aa443a214ee6bc988334e82086d6474cffdd80f7aea79429eb307f32eeee665c0ac3ee0b39c91f05932f09a85ae22c0cae0c1e45497115b011d30de0958670a995180f4d2946b545eb2aec7e3736d3bf86449f111d73159aef5dcb430b4c1cc2753e541371b78d7e1f4272a91d6e9d629d8953fbe8e36c8e91e56706957408df988a6c1974846c7a4eff148c3aa3f929e18b9a95d6bc01a3bef9af8474dadaf72dbf72d5af3bb19609f4de6f0f6c8491c763b5276f4d3d324f647937a76d197c4057734fdfafa7532168c626c618454e4c08c2084775e3880a6f7634bf9c3d34acbc041c11884fa7259ee2d07b14ed054424f560df44418846b9508c5d7ba90c483ff1ede33387102ded51254e93e8f526ab2dd94bf81ee2b61e57c796be08c1de24dbef2f2956f9b44a98c32c672d81fbc2f33414dff7c622414c2db60dfecf4820f684780de708a838e500edeae6e929986eae0e2bfbfe5ba0cca8b42e0e67dfd5ec077970d9df16612ac26dae598ef627291b87b7029c345de41fb3636c06c37be41823f0e569a867219807e2ce2a177dea97cb89f3d43e2dd0f8eca5785a4bb7c4bd7cc770a01af49b9748212aa7c7c95d59915b37161983cd8aa30db3d280545e18a8f8ef5bfb6bb1a52787d2b5fc5f42578895177e02af927de2e2a9deec7999af72885662c9852454e87138d93e2993f22af69a3195ce8fb6fa7fc778f146df1aff800545999c0c96925d91818e056679bf12323c9060f016e3635c2caba1786978e794ad19e45bc1f7d99c1f594fa9f359d32db0b2fc031dae54476e4e1b777d329f073e58e9cb7860b1eb6387852f947b47a0c101c85ff7335894813d63c9ad94cab48f3333d1437f0b6afe3550cd9abf1daac51f859409a0c40a6452e43252d496bca5cb3df64f01ef701a02e1b13d8949b1074ca647b72e789c534226bb13de70dfeeff2aac183fb0650e9edac8d22082625ffdd63796d364e39fd62beccf011ec946689c2cdaf93070515be450370c157781416262471930677b306868c6dbf50f666d272bdd11dc0c9b5a771f706b843c156c6909a93fb3685698b10f433dec8ca436743d8f137f019edcb67e3e582cc244ba02d3b3f3bbd9e1d8f1454619666553a56697c63f28b1a8356da9bfef5c7f9f1c90291b6e351e38db6d5bcb8ba97a435f95dc7e229b699b83437c46c174274de7b97618f419be2393797312c7f267debe52ed9e8b1c4dbb3c6b3d0595a3bd6a9d8b0b680177dd4913014ffcb406075f0fb848c060de45f62746285732dc5ceee7176bbc4cf0aeb83af966293b6052593021b735a20561c5fba0c4c93fda7f2b8fcbc350363e1834d48ae242530a6178b118a8a5453cf3e9c6ff37648603ab0d944cabe03e554733cd4ffc7437e17f2fe872fa7a29e75a7ef91af02440dfc94d944e2008829a2658431f348c47dc244709f80041da5a6b302fe60a909e74f2a627f40ed09cd74191e32adf17374788bda06ba80b3bd661d6312b48dddb30d4780347d48aa8d9079e21df0d1c4835cf392440f5018ca70e4c626f5f86b225eb0011ef5cd6edea045ad2526e6bc6d6c9b0e9f4400876859b3c3909e322250a3f083fbe79d101e748e95ca4c4b5fd3a40d75ef95d03319d972688cd0499cfd1c6ca5b12c5f714a83c9411aec36af63a0ab5c8a28fcc6e3854263d6a8dd170ec2154218028fa9e36969f29b54e5993e469a26f510f426ba12c5d95a215915ffddf80fe551259694fa146ddf9521c0b32a9764b9a8badcfae7f4a257e7d75cde8e8cbd6303a18f2b64a9c95b42ecea520cec86830665fc8e798c5331bf1651eaa2c222d419ed3b6cdfa315c1cb50baf67bb5b3254def8110d28ad763361db3caec8da2012a2c13b9341923e99f224c2eaa741af2f24f666b5746215314f78a0745b2ba22dea34c4f4fda6fd61a29d634eca11744f7e7045ff88e1115090b698991b73c3bda833b44067743d7e400c889a5de46ed774a909c38f7e570664a4027cc96d678804bb385fd66283e49890433a2526602780f8827e33bfd78de594ef2d77f27f4ecb73d62c6bf7afa08d55d3e8baefb71f2eb416ebf1d2fa66cae40d415ef73d6ab910ca38ea4f6ed59ec9a7675cef4937158327af35c89cf65084e86821808da756d8ae7e66ba339ba7a8d6104228ed9d65dc2e547c364d6a7d6ea9144c5e843b909c8de12c7d40155e547f7012ed3ac5e6d410aaa7b13093813b1f4a655f97ee451d5d5840f5ed62b799ccabdea14d1a8cdcb896123abd2ece43048c283b8fcf37b7809d1dc78159cd9744c4bb5513a27fc49f20352d8d07f2410255e4f21573200b479", &(0x7f0000002a80)=""/192, 0x7fffffff, 0x0, 0xf7, 0x39, &(0x7f0000002b40)="bc8e41a261698af865c2b4d6d12612c33522d820151b14d6422ace9c1a5edae6c99915246ac38d1e37b5ab62e4a4715bcfe7ed286d9161245f9bc6ba8de51e6bf573209716894f192d2b25002e0fa9e20e0209b5fd55e77cf1cb81e5e18ade08a6dfabe515f731c737f6eab7e21a7f21f3e3a2b54335777606146bef32dfa331d63c50102a49424c16d1885077463a916880412b4f3a5fb9bc4115302b6abaf937dfc4dba3eb21f55b6be524f0101325d1f4013b1e175ba82af8c7dc8c0b0fa239c14cbcca276646ae88572a567a4d187337f82f322b7eeebfd7363c344907be62ef0af295240d382bedc3170e6e8a6a28626828961813", &(0x7f0000002c40)="1b8bdb12746e47b4118704507bf6dbba476c6fb66ee824d04876bb8453291bb1f05f4aeb1905139c8e2f67376e29cdcc31134ed581b98915e8"}, 0x40) openat$cgroup(r4, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000880), 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x10, &(0x7f0000000340)={&(0x7f0000000280)=""/159, 0x9f, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x2, 0xfa, 0x68, 0x1f, 0x80, r5, 0x4, [], r0, 0xffffffffffffffff, 0x2, 0x5}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x8, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000001000100000000000000000018290000", @ANYRES32=r7, @ANYBLOB="000000000100010018140000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000500)='syzkaller\x00', 0x80000000, 0x62, &(0x7f0000000540)=""/98, 0x41100, 0x8, [], r0, 0x16, r5, 0x8, &(0x7f00000005c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x8, 0x8, 0x1f}, 0x10, r6, r5}, 0x78) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="5827f4ff0100000018000000c7b4000000000000d35b0000599901000000000018190000", @ANYRES32, @ANYBLOB="000000000000000018110000385f00e4e54868e848d8a105000000000000007c09f2604ecc90855eeca85a19777d4bf949a9495b2059dd95b5a0f06330e53d7fe88ca6c046965d9c4dd8a9ed810c14801edcdcdb51d9449306651219478e37101641be2644a4e3f58486cf0b47a6d7b6c1335da8d5d0dc82b7e735c60a4b9d57a9c0e0895f94358333806b7e5d004b7c4bef495068b937708bef9471e0362c84cb7b66bf873b4fec94cdb9ce9377ac8cb81d91344cf5bcc2eaa119750cec269c4d8a67e228149fb8cf7cb30314dd422892eae44332eca24223bfa5ef74db988920db40ec22214647bb44280171d65a513ffa2385a1a68b", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)='syzkaller\x00', 0x3d6, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x2, 0x0, 0x8}, 0x10, r6, r8}, 0x78) bpf$OBJ_GET_PROG(0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10) 05:32:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x44845) 05:32:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10191}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:32:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000005"], 0x18}, 0x0) 05:32:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) 05:32:29 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x539003, 0x0) 05:32:29 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='e', 0x1}], 0x1}, 0x40) 05:32:29 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 05:32:29 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x7c1, 0x0) 05:32:29 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0}, 0x20) 05:32:29 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:32:29 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000080)="865ac351d7b42a4895e513a7dc049e30fdc0702bd5115105c65e5f1191d0d900c01339c6d72be72fcbf4defa66260859b80f614b8d1ae99cfc46aac86957c8388badf35a90dd768cc0b3279af1e73e5ff3612810061dfdad5b43e259e49f098219be9fe85072a703b8b9bb91d3a0278c4227cb1ae89b0048b7b4a51cd23aba244e1980822bd862de9fac3a7f37ce91b18ae0bf46cdeb258b12f0c4a87fb65107a0dd25fb35e3e78d2441", 0xaa}, {&(0x7f0000000200)="c5266c3f0dbe625da48fca5f0c30c91fdb36a418ef65c34492ad7a6fea30663a31054528ab91ada6d48fd9733b316f5d1db9d36f2ce1426574c752a8bfe30c5fc9e69b31a77f2330dc35736dd12f20e67d521f467fa0e12235504c161837909937e17cf746da2471a13126f03221896418b05368186a4095f5c7743e33a873f16b48dc984caf94556b33e73958ce2472dd8d91e16797a779819494e5e82c05674b4027bb62", 0xa5}, {&(0x7f00000002c0)="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", 0xd72}], 0x3}, 0x0) 05:32:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x75, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 05:32:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000080)="86", 0x1}], 0x1}, 0x8040) 05:32:29 executing program 5: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:32:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000280)) r1 = gettid() r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf5, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x0, 0x28, &(0x7f0000000140)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x10, 0x0}, 0x30) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000480)={0x0, &(0x7f0000000440)}) socket$kcm(0x2, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)}, {0x0}, {0x0}, {&(0x7f0000000040)}], 0x4}, 0x0) 05:32:29 executing program 4: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:32:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x120) [ 257.551865] hrtimer: interrupt took 42201 ns 05:32:29 executing program 5: socketpair(0x10, 0x0, 0x0, &(0x7f0000000340)) 05:32:29 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='e', 0x1}], 0x1}, 0x0) 05:32:29 executing program 4: perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 05:32:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 05:32:30 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x4f, 0x0, 0x11}, 0x0) 05:32:30 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@name, 0x10, 0x0}, 0x40) 05:32:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000002340)={0x0, 0x0, 0x0}, 0x0) 05:32:30 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) 05:32:30 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000040)=@framed={{}, [@func, @initr0]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0xad, &(0x7f0000000100)=""/173, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:30 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f0000000400)) 05:32:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) 05:32:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x5}, 0x4) sendmsg$sock(r0, &(0x7f0000002a40)={&(0x7f0000000740)=@in6={0xa, 0x4e1d, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 05:32:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 05:32:30 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(r0, 0x0, 0x0, 0x0) 05:32:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, &(0x7f0000000000), 0x4) 05:32:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0xf}]}, 0x1c}}, 0x0) 05:32:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}) 05:32:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x40) 05:32:30 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x0, 0x12, r0, 0x0) 05:32:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x1, 0x0, &(0x7f0000000300)) 05:32:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x6, 0x0, 0x0) 05:32:30 executing program 4: unshare(0x42000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x40001) 05:32:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0, 0x0, 0x700}}) 05:32:30 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8916, &(0x7f00000000c0)={'macvlan0\x00', @ifru_data=0x0}) 05:32:30 executing program 2: sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0}, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xac}}, 0x0) 05:32:30 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='\x00'}, 0x10) 05:32:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x38, &(0x7f0000000000), 0x4) [ 258.724965] IPVS: ftp: loaded support on port[0] = 21 05:32:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2015}) 05:32:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000002900), 0x4) 05:32:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="65c5623e9611c1dae318ff90beb9", 0xe, 0x0, &(0x7f0000000080)={0x11, 0xf438ac3552fcc103, r2, 0x1, 0x0, 0x6, @dev}, 0x14) [ 258.749260] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8935 comm=syz-executor.2 05:32:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x8224, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) [ 258.834123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8943 comm=syz-executor.2 05:32:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000000), 0x4) 05:32:30 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1600bd7a, 0x0, 0x0) [ 258.994639] IPVS: ftp: loaded support on port[0] = 21 05:32:30 executing program 4: recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x21, 0x0, &(0x7f0000000140)) 05:32:30 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000002a40)={&(0x7f0000000740)=@in6={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}}, 0x80, 0x0}, 0x0) 05:32:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x24}}, 0x0) 05:32:30 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x20) 05:32:30 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f00000003c0)) 05:32:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile={0x7}]}}, &(0x7f00000008c0)=""/222, 0x26, 0xde, 0x1}, 0x20) 05:32:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x15}, 0x40) 05:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x891e, &(0x7f0000000280)={'gre0\x00', 0x0}) 05:32:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x0]}]}]}]}, 0x2c}}, 0x0) 05:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x11, 0xb, 0x0, &(0x7f0000000180)) 05:32:31 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 05:32:31 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x5452, &(0x7f0000000880)={{0x2, 0x0, @remote}, {}, 0x0, {}, 'ip_vti0\x00'}) 05:32:31 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:31 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000140)={0x2, 'veth0_virt_wifi\x00'}, 0x18) 05:32:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x2, &(0x7f0000000880)={{0x2, 0x0, @remote}, {}, 0x0, {}, 'ip_vti0\x00'}) 05:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x31, 0x0, &(0x7f0000000180)) 05:32:31 executing program 3: pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140), 0x0, 0x0) 05:32:31 executing program 5: pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f00000001c0), 0x0) 05:32:31 executing program 1: syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') 05:32:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000840)={@multicast1, @local}, 0x8) 05:32:31 executing program 2: syz_genetlink_get_family_id$gtp(&(0x7f0000000b00)='gtp\x00') 05:32:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:32:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f0000000140)={'gre0\x00', 0x0}) 05:32:31 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000001940)='l2tp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) 05:32:31 executing program 0: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) pipe(&(0x7f0000001480)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001940)='l2tp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) socket$l2tp6(0xa, 0x2, 0x73) 05:32:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f000000d200)={&(0x7f000000d100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000000d1c0)={0x0}}, 0x0) 05:32:31 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4103}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x13, 0x0, &(0x7f0000000180)) 05:32:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 05:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x541b, &(0x7f0000000880)={{0x2, 0x0, @remote}, {}, 0x0, {}, 'ip_vti0\x00'}) 05:32:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 05:32:32 executing program 5: socket(0x25, 0x5, 0x3) 05:32:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}}, 0x0) 05:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xb, 0x0, &(0x7f0000000180)) 05:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000050c0)) 05:32:32 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000053c0)={0x77359400}) 05:32:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000020c0)={'icmp6\x00'}, &(0x7f0000002100)=0x1e) 05:32:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x60, r1, 0x909, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}}, 0x0) 05:32:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="f3ff0000000000000000110000000c00018008000300040000002c00018014000200626f6e645f736c6176655f3000000000140002006970766c616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030003000000080003000300000008000100", @ANYRES32, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="6c0001801400020063616966300000000000000000000000140002006970366772653000000000000000000014000200677265300000000000000000000000000800030000000000", @ANYRES32, @ANYBLOB="08000300030000007c000180140002006873723000000000000000000000000008000100", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006d616373656330000000000000000000140002006d6163766c616e30000000000000000008000300010000000800030003000000140002006970766c616e3000000000000000000008000300020000000c000180080001"], 0x198}}, 0x0) 05:32:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 05:32:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 05:32:32 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000006680)=@bpf_tracing={0x1a, 0x3, &(0x7f0000006200)=@framed, &(0x7f0000006240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2b52e}, 0x78) 05:32:32 executing program 3: clock_gettime(0x0, &(0x7f0000005080)) 05:32:32 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000007300)) 05:32:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:32:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8947, &(0x7f0000000140)={'gre0\x00', 0x0}) 05:32:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 05:32:32 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {}, {0x2, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88, 0x65, 0x0, &(0x7f0000000180)) 05:32:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x21, 0x0, &(0x7f0000000180)) 05:32:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001d80)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x2c}}, 0x0) 05:32:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x6, 0x0, &(0x7f0000000180)) 05:32:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(r0, &(0x7f0000003d80)=[{{&(0x7f00000002c0)=@x25, 0x80, 0x0}}], 0x1, 0x0, 0x0) 05:32:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) 05:32:32 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@volatile]}}, &(0x7f00000008c0)=""/222, 0x26, 0xde, 0x1}, 0x20) 05:32:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x19, 0x0, &(0x7f0000000180)) 05:32:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x29, 0x0, &(0x7f0000000180)) 05:32:32 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) syz_genetlink_get_family_id$l2tp(0x0) 05:32:32 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, &(0x7f000000a380)) 05:32:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x2c}}, 0x0) 05:32:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88, 0xb, 0x0, &(0x7f0000000180)) 05:32:32 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f0000002600)='ethtool\x00') 05:32:33 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"cc041c495aafd9c171ef2326170bfff9"}) 05:32:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}}, 0x0) 05:32:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8910, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) 05:32:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000052c0)={'team0\x00'}) 05:32:33 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) pipe(&(0x7f0000001480)={0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000014c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001940)='l2tp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)) socket$l2tp6(0xa, 0x2, 0x73) 05:32:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8983, 0x0) 05:32:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000440)={&(0x7f00000000c0), 0xa, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 05:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88, 0x82, 0x0, &(0x7f0000000180)) 05:32:33 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @volatile]}}, &(0x7f00000008c0)=""/222, 0x3e, 0xde, 0x1}, 0x20) 05:32:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0xe, 0x0, &(0x7f0000000180)) 05:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)={0x20, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 05:32:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) 05:32:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 05:32:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="98010000", @ANYRES16=r1, @ANYBLOB="f3ff0000000000000000110000000c00018008000300040000002c00018014000200626f6e645f736c6176655f3000000000140002006970766c616e300000000000000000005800018008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000800030003000000080003000300000008000100", @ANYRES32, @ANYBLOB="14000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6c00018014000200636169663000000000000000000000001400020069703667726530000000000000000000140002006772653000000000000000000000000008000300000000001400020073797a6b616c6c65723100000000000008000100", @ANYRES32, @ANYBLOB="08000300030000007c000180140002006873723000000000000000000000000008000100", @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="140002006d616373656330000000000000000000140002006d6163766c616e30000000000000000008000300010000000800030003000000140002006970766c616e3000000000000000000008000300020000000c00018008"], 0x198}}, 0x0) 05:32:33 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f00000070c0)) 05:32:33 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)=ANY=[], &(0x7f00000008c0)=""/222, 0x2a, 0xde, 0x1}, 0x20) 05:32:33 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000001940)='l2tp\x00') 05:32:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8901, &(0x7f0000000880)={{0x2, 0x0, @remote}, {}, 0x0, {}, 'ip_vti0\x00'}) 05:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000005080)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000050c0)={0x0, r1+10000000}) 05:32:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x29, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x78) 05:32:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x7, 0x0, &(0x7f0000000180)) 05:32:33 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x2, 0x0, &(0x7f0000000180)) 05:32:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, &(0x7f00000008c0)=""/222, 0x32, 0xde, 0x1}, 0x20) 05:32:33 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0) 05:32:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000016"], 0x1c}}, 0x0) 05:32:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, &(0x7f00000008c0)=""/222, 0x0, 0xde}, 0x20) 05:32:33 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 05:32:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x3, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) 05:32:33 executing program 2: clock_gettime(0x0, &(0x7f0000005140)) 05:32:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0xc0045878, 0x0) 05:32:33 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x85) 05:32:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000006c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xffffffffffffff9d}, @ETHTOOL_A_FEATURES_WANTED={0x0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_NOMASK, @ETHTOOL_A_BITSET_BITS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x0, 0x2, 'pci\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK]}]}, 0x38}}, 0x0) 05:32:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x88, 0x67, 0x0, &(0x7f0000000180)) 05:32:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001200)={&(0x7f0000001000), 0x4, &(0x7f00000011c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="60010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x160}}, 0x8000) 05:32:33 executing program 4: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 05:32:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x4}]}}, &(0x7f0000001540)=""/135, 0x26, 0x87, 0x1}, 0x20) 05:32:33 executing program 1: socketpair(0x28, 0x0, 0x2c2, &(0x7f0000000040)) 05:32:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'gre0\x00', &(0x7f0000001900)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 05:32:33 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', 0x0}) 05:32:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2) 05:32:33 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, 0x0) 05:32:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0xc020660b, 0x0) 05:32:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) 05:32:34 executing program 4: pipe(&(0x7f0000000d40)={0xffffffffffffffff}) read(r0, 0x0, 0x0) 05:32:34 executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 05:32:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 05:32:34 executing program 2: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x3}, 0xc) recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f00000001c0)=""/178, 0xb2}, {&(0x7f0000000280)=""/253, 0xfd}, {&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000380)=""/183, 0xb7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/102, 0x66}], 0x7, &(0x7f0000001540)=""/149, 0x95}, 0x10000) socket(0x0, 0x0, 0x0) 05:32:34 executing program 5: syz_genetlink_get_family_id$net_dm(&(0x7f0000001600)='NET_DM\x00') 05:32:34 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000004780)={0x0, 0x0, 0x0}, 0x0) 05:32:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) pipe(&(0x7f0000000040)) 05:32:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 05:32:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 262.384330] IPVS: ftp: loaded support on port[0] = 21 05:32:34 executing program 5: pipe(&(0x7f0000000d40)={0xffffffffffffffff}) write$binfmt_aout(r0, 0x0, 0x0) 05:32:34 executing program 4: sendto$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:34 executing program 3: pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, 0x0) 05:32:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:32:34 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) 05:32:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xf, 0x1}]}]}}, &(0x7f0000000140)=""/204, 0x36, 0xcc, 0x1}, 0x20) [ 262.984463] IPVS: ftp: loaded support on port[0] = 21 05:32:35 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x78) 05:32:35 executing program 3: socket(0x28, 0x0, 0x52) 05:32:35 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f0000000140)) 05:32:35 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 05:32:35 executing program 0: pipe(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001600)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x14}, 0x14}}, 0x0) 05:32:35 executing program 4: socketpair(0x1a, 0x0, 0x0, &(0x7f00000000c0)) 05:32:35 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000100)={'geneve1\x00'}) 05:32:35 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r0, 0x0, 0x0) 05:32:35 executing program 3: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) 05:32:35 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000002d80)) 05:32:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xe}, {0x0, 0x1}]}]}}, &(0x7f0000000140)=""/204, 0x36, 0xcc, 0x1}, 0x20) 05:32:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40) 05:32:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockname$ax25(r0, 0x0, 0xfffffffffffffffd) [ 263.317706] geneve1: mtu less than device minimum 05:32:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) 05:32:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000000140)=""/204, 0x2e, 0xcc, 0x1}, 0x20) 05:32:35 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000003980)={&(0x7f0000003940)='./file0\x00'}, 0x10) 05:32:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400", @ANYRES16=0x0, @ANYRES64], 0x14}}, 0x0) 05:32:35 executing program 2: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 05:32:35 executing program 4: socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x14}, 0x14}}, 0x0) 05:32:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) 05:32:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c40)={0x18, 0x3, &(0x7f0000002a80)=@framed, &(0x7f0000002ac0)='GPL\x00', 0x4, 0xb2, &(0x7f0000002b00)=""/178, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:35 executing program 0: socketpair(0x6dfa4f88c61fde0e, 0x0, 0x0, &(0x7f0000000040)) 05:32:35 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000004880)) 05:32:35 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) 05:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x4020940d, &(0x7f00000008c0)={'syztnl1\x00', 0x0}) 05:32:35 executing program 3: pipe(&(0x7f0000001380)) 05:32:35 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) connect$vsock_stream(r0, 0x0, 0x0) 05:32:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x38}}) 05:32:35 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x4003, {0xa, 0x0, 0x0, @local}}}, 0x32) 05:32:35 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000540)={'tunl0\x00'}) 05:32:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f00000008c0)={'syztnl1\x00', 0x0}) 05:32:35 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') 05:32:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5}]}]}}, &(0x7f0000001540)=""/135, 0x32, 0x87, 0x1}, 0x20) 05:32:35 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xaa, &(0x7f0000000240)=""/170, 0x1f00, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300), 0x8, 0x10, 0x0}, 0x78) 05:32:35 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x10, 0x0) 05:32:35 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 05:32:35 executing program 3: pipe(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 05:32:35 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 05:32:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00'}) 05:32:35 executing program 4: socketpair(0x2, 0x0, 0xb0a1, &(0x7f0000000840)) 05:32:35 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, &(0x7f00000016c0)="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", 0xb39, 0x0, &(0x7f0000001300)=@in={0x10, 0x2}, 0x10) 05:32:35 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x26, 0x0, &(0x7f00000000c0)=0xfffffffffffffed6) 05:32:35 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x32, &(0x7f0000000000)={0x0, 0x6, [], [@ra, @jumbo, @ra, @pad1, @jumbo, @enc_lim, @jumbo, @ra, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x38) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 05:32:35 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, 0x0, 0x0) getsockopt$inet6_int(r0, 0x29, 0x32, 0x0, &(0x7f00000000c0)) 05:32:35 executing program 1: syz_emit_ethernet(0x4e6, &(0x7f0000000100)={@local, @empty, @val, {@ipv6}}, 0x0) 05:32:35 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 264.137084] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) fcntl$lock(r0, 0x1, 0x0) 05:32:36 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 264.209295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.242351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) bind$unix(r1, &(0x7f0000000140)=@abs={0x8}, 0x8) 05:32:36 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000002500)=[{0x0}], 0x1, &(0x7f0000000200)=[{0xc}], 0xc}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 05:32:36 executing program 4: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1c) [ 264.483881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.501693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.508501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:36 executing program 1: syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:32:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 05:32:36 executing program 3: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto(r0, &(0x7f00000015c0)="779ed7ee035ba3c1", 0x8, 0x0, &(0x7f00000001c0)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:32:36 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=[{0xc}], 0xc}, 0x0) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) 05:32:36 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x100, &(0x7f0000000480)={0x0, 0xee6e, 0x4, 0x7ff, 0x2, 0x8001, 0xfff7, 0x92f, {0x0, @in, 0x80000000, 0xfffffff8, 0xffff, 0x5, 0xfffffff9}}, &(0x7f0000000400)=0xac) 05:32:36 executing program 0: r0 = socket(0x2, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 05:32:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x53, 0x2}, 0x2e) 05:32:36 executing program 2: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:32:36 executing program 4: clock_settime(0x0, &(0x7f0000000080)={0x0, 0xfffffeff}) [ 264.776774] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1017, &(0x7f0000000080), 0x4) 05:32:36 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) sendto(r2, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) [ 264.840610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.875600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:36 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:36 executing program 1: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, 0xfffffffffffffffe, &(0x7f0000000040)) 05:32:36 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 05:32:36 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000f186dd609900bf00000000fe0000000000008000000000aa000000000000ff"], 0x0) 05:32:36 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 05:32:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a012e0f"], 0xa) 05:32:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, &(0x7f0000000040)="b1", 0x1, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) 05:32:37 executing program 3: r0 = socket(0x2, 0x3, 0x0) sendto(r0, &(0x7f0000000040)="304da4ee4fd36fcd01c4a485c813352bb687c4ae829faf7b24ba6b8ebadd1c337900eb045f7913f95c7aa32a9139ab3e8a073427493be5f4cdf2c75dae03897f8b2f8c3b2b2e23a51a845b43c2b81b707265896d48a175da94999d20b0", 0x5d, 0x2008d, &(0x7f0000000140)=@un=@file={0xa}, 0xa) 05:32:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, &(0x7f00000016c0)="0a4f5d8565e2e69818e7edb9e9c44694cc780274d0ded7a8cfc6f9c64e317b8a10326173a4f04407c8127ae54bb82e0f1a884d7873562479fe3f5dcb55196204965411b87da6998e93975e90d6821f44bba24e1a00257e9b76fff0d6c707f2f46ab2371043d3035a94b0f5f42835bea27863695fdd717636447988d7330beb0a9ac988fd6bc0c562392a4738ab23537d63b82b7b5e24e02dd4b3fe72c9a5848c5e6b6c8ea5fb22b21ca369283c6da88cb97ec134419cfd809061168772f8166ef0f4d7ba23937d6c9ace89610684169118e55302c865d802a0d212a85c2101c7da407f0c4cdc0e3449269efb6b35ad5b00de0809ce31496e1067c7deda24f0dbe075a6e570f230179f5f61e9a08452be408b48c31f7a9b30d0a71fe8bb1a9db4ba3150c29d809c685829da9f5a3110e8a18536554beaeca1369e902b28a8b25d7844a022d7ffa85170119063be4b89ca1e89819d3c74be53fd79f17ab01930f2a65fb225cf6ce86e744bf50f39ab9ac05c4f736f2930f78ea9051f83569b1148253d2aade9201016eece37d2d1c9c0b3e95a0dc38c9ec5a92c9e2dd31627f17b26482e8a3702ff592356e8c5f9ef341f8b9fcf8a6558564d9fff51cb822e15ab7201c98264cab10aa9aa43dc34a1ab4537bfdec71717817d42a5d5e1088756971f966e7d255e0489b2f6f561ff580b5ffadb9a90f7dd37e611497f50a785d8fb9011b90eb06b17b80da49287220fa98c4e838cf907f30ea7413417d3b064778cbf7ebcb636e3676dfa14ffe0249ab3b92bba90a24b2eb5209d574045e0ab9735ad5de436bfd59a74c4e1ab4dd183614c6d17a41c3a2f84981940ffba96919094197b0ee680220cd73bea33da3ff7aefd6aa9d38204a614b7346e124440b436aaf2bec317606d38c0a123eb6b3c85aa2cd172b69e030d9a0e564b9a8ceb34ce5608fb138b6a262c59408a2f0356356cad1e74632eb0b59d7658142cb0ccebe39ed2c3af125d68b2ebfd94f47a0141d08d0edc61a6f3da00f584318176e81fac460ebfbd4a87dc79bba789de81045c04b9504b11cca1068bd93db068bf0683e569cb666a408c1a8f548a7b71bbbd4f1292795245faabadeca819232c0480397e9a81253daf8d8460a976cb951d57c7f690721280841c0ee508400cbc5c0126628ef9abc7dd7f5963fe463b53ac7a8d079713b566b2680944aadb8bbf8671c25f42c213fd150e6a4723f87b2a9f3fe84fd11f623e2d601c53dd7e5ad2eef5dcac692fba6c7002a00f6ce00f0d6c75509cd73028140f024c0e6e5e324f1313eee2227072958e9dab5f0a1fe6af58d875ffece089995000297a29d23204df1d8727130cd09a329a982412c24e23655c67ab40ee4532d84355f75cf01d184b151289f5cb38894ac703f1eec4bc035340a8d396a11c834ae84d85a55ad45df4a8f5d82a027fd548cfa15faf2f267661af3ba271089af0cf98e3672e54db47f3e9d2fa849443d5a9c55cb895525d0060a62c7eb55a5fed55c60f01a34e4bac9ea4ad5f1626e090a6e3209897fe356ebbb40d865d6a943bbfbab6407548c58bfa32538898a9cdc3161d80c1514f6d13e1961b4fadc54e0d04091d1189570f4eda04b6750e4fdc187411c78a4ef17e3bf789a995d723c05db79eb7c1acc32154ed180d854a35145fd3e49dc1d3500a7f2196743b5039158ecfbe2144794b1ea145ea69091867ee701a720c00b514060d44d7cb8492bddf539ed9af505980d492631a92129effb25d93467b159880db8954d0bf3f5a6781d68d586112483a5f49ef880effdc92b4a8ed7014a6c62f89d7b32a15a3f79f65ad86fe6c17b8c35cd6424d92d97434b8ad4e384bce65c348554834ba600861f5e9c883c5523cc6d4d3e88052728d7517a974313fcba92c2cccb0faa967af6138ad32ac6efad64867f5753f9a7751c4d4d4c8d94a0acaf1b981494944e502eaeec86ec40a29db757b72931a14b6d0d303fd9b8969c68754ec2da5a2fb46e821d0613483f7cfca5aaeda3d1deb378f82eb9ddc1102b607e817cecf7b20a599ff9cc7c8dd28489c5e0f90f1e3f6b7fe63362a9d3905453cf475bee02e393a287aa51cd036c6ea7f10e7f402208334b34c2a4f553fe81c31688e4007b4b66a42c613c15fe055ea74cacfef9c42b2e2afccfc0f7439b76c312fe9b7226487fbdf662b05a816ea3e79f83468f53a5228afc83a98481f227fd906e6c233aaf9d3c8ba6791f0a42fa7bf83db936b5bbeb02b41eb40b0cc75b317f8ca28149053e914a9f86191c2b6e4257d892175a6d3d4692e37807cd30c1e2afcbec9a4b0e20b80ecb5a46dac41795ea638ad6b1b43c97945bf978dcb7c9f7b3875dc18bf99ca1030c058c4ab8b0c15d3008ad25301116dc8b27644551c8fceffc9698f4aa349a123beaa58935177fecd7411012304b84e67c3b3e4489e7a980971f1260c33a37c4c713b33ba4b8e9c4b4250c297a3488a05931a2d98c014dbfd4bde7eacb65a5873a9e1ee0d0095e053bd7c59153a00a05726e7a6fda1283a7e4af086117e021cc45acccd967d30b84fd02fa28b6da063cdd64577b5179f527f057840c0bfe4e68e1bd971f86f7b00ad984adcc5bc97d37a18fbd76cbac7279b0c2f632b9a1817ad18789812debdee7642b9b0238f307bc852e6d2a6687c14ae543d4b8a4aca74cfdcbe7fe9eac4e186d3011637895740389904dcb87ba63ca7fb80e2267c4c2b6f2f881b521eb966500c5e5c6b32264028d9348904763439419fb1857bbab173a576e422b34ff2d735f53ea929c1f50d76f88784a29e1c68b84fbd5a460807a33c2f3277ef7179ef137c050c3bc30476804a0dc49d80d3e28978e8f2bede8b6a5a66c89e25688a6f89d888fc6ae445dd441186f3f1c3087ef7218cf879bad3003c1eeec4cf453d86490e3bd47cc87c6653eff805d3dbba252d0eb15ddbc6961b08eaa77c3e9f97b03a740899c3f5733010de70185a14a1e48eeea0fe9330ff5ee73c77db2c562e92f78aa972160d4ae414bd8cb1507e10ecd82e641d371e6f96a7cdfafdbce5e274481649789eb3f992ae6725dda168c3cbc84806ab100a5211a8c98aa80b603a2a173b67dba0d6a78d16afe055900635b2317820eeb05446d0398a6bf640e99bb1c3631458585024e0ab26f2b72ed17aee96fe99ee8b3541e1c21a6533c51cfdc2a065bad99e10824d63d3bdfef48fedb265f094c4a505d43436d90fb94faa96a6e3144a3cf3d04c541cd0aa1dbab4368a38f367d3a0b386699bee6a194468c1d6f20822affc32093bc3ef0336634add47f83b3548071f45c9d88e22b251617806687ed0490124509bae23183f3d537b94fb18f2b4501e4ee7daf1cd7d19eff4f4a10b48b63994d05684cee3757d5490acdde711baf119290f3fe18a232f81365fbd07d0f08bd7813d6cec45af155c38617ac1570a37829988ad88d81d4d1d6971641225cc68a7decc29a3a1f662d388d636479e9275b8ee54a68f48f2344ef4acf4ea28437ee0cf0f231f5c125fbcfd490600af9ea222c4f3bd69a5dca2f3b300c19715d078e2767a7bc6f71eae6c58a4be2147e055eb3bf27cecef0f1cadf53ebec34cfff6cc45fc0e6b62132f84e3d7459499c6f6a543f1cb00f35e6dac8b6b7f769c919596c0fc6122720db760d17925b06369b804d5456af667f2a8dd39f1c3fd47700c0b96c613e653c0332444017f50708f278d8faa0276c13da7c7c2046d84155d9896fc92f860e5be41226deb162e03c1700c940d757293b2babadbdabb19bb8d836d807cfe37e75efee9a6646d6e65acb622f28a271469844fac0c72d6825a1b00abb3a9661ea03232ee02f8600511b8fd6806c509a17fce4c90667f61dfb9b59fc09d021232409970443bcdda58086061ed7676dc1d1d18f74131456050794d529bb5735ae247474565bf7b49c84325dbcaf31e44056e037fe9966fdf25fce8b6fc7952a15c417f16526027b6deb2fc543c9d7f867a62a3fccb35a73b5aecf1161b85ef18beb7212fe79b216a186527c6d7778317c7563829b52372", 0xb38, 0x88, &(0x7f0000001300)=@in={0x10, 0x2}, 0x10) 05:32:37 executing program 0: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f0000000180)=ANY=[@ANYBLOB="0016000000000000010400f6e42957"], 0xb8) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:32:37 executing program 4: open$dir(0x0, 0x2b0e02, 0x0) [ 265.247179] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:37 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) read(r0, &(0x7f00000000c0)=""/94, 0x5e) [ 265.291941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.337646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:37 executing program 4: syz_emit_ethernet(0xd6, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6024a1f500a000009857c739f972c41c7a1b2209383f01a2ff02"], 0x0) 05:32:37 executing program 2: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000480), 0x0) 05:32:37 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 05:32:37 executing program 3: r0 = socket$inet6_udplite(0x1c, 0x2, 0x88) sendto(r0, 0x0, 0x0, 0x100, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 05:32:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)=ANY=[@ANYBLOB="fa", @ANYRES32=0x0], &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f0000000000)={r3}, 0x8) 05:32:37 executing program 0: poll(&(0x7f0000000100)=[{}], 0xe109, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 05:32:37 executing program 2: sendto(0xffffffffffffffff, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x1) 05:32:37 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:32:37 executing program 1: sendto(0xffffffffffffffff, &(0x7f00000016c0)="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", 0x941, 0x0, 0x0, 0x0) mincore(&(0x7f0000002000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/95) [ 265.708070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:37 executing program 3: syz_emit_ethernet(0xaf, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:32:37 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x15, &(0x7f0000000000)={0x0, 0xf392}, 0x8) [ 265.795900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 265.834319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:37 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 05:32:37 executing program 0: openat$ptmx(0xffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80401, 0x0) 05:32:37 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x1c, 0x1c, 0x2}, 0x1c) 05:32:37 executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 05:32:37 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x33, &(0x7f0000000000)='a', 0x1) 05:32:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0xa, &(0x7f0000000000)="6c2a2d14", 0x4) 05:32:38 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 05:32:38 executing program 3: syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:32:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, &(0x7f00000016c0)="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", 0xfb5, 0x0, &(0x7f0000000000)=@in6={0x0, 0x1c, 0x3}, 0x10) 05:32:38 executing program 1: r0 = socket(0x2, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) [ 266.198925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:38 executing program 4: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x2b) 05:32:38 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f00000000c0), 0xc) [ 266.273223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.311054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 05:32:38 executing program 3: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xd, &(0x7f0000000080)={@multicast1, @multicast1}, 0x8) 05:32:38 executing program 4: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7, 0x411, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7) 05:32:38 executing program 2: syz_emit_ethernet(0xad, &(0x7f0000000040)={@local, @broadcast, @val, {@ipv6}}, 0x0) 05:32:38 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000002480)={@remote={0xfe, 0x80, [], 0x0}}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000000)={@empty}, 0x14) 05:32:38 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000002480)={@loopback}, 0x14) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x1c, 0x3}, 0x1c) 05:32:38 executing program 4: mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x81011, 0xffffffffffffffff, 0x0) 05:32:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt(r0, 0x0, 0x6, 0x0, 0x0) 05:32:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x40004, &(0x7f0000001300)=@in={0x10, 0x2}, 0x10) [ 266.651281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000140)=ANY=[@ANYBLOB="01"], &(0x7f00000002c0)=0x8) 05:32:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 05:32:38 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="f50b9234f7d9", @val, {@ipv4}}, 0x0) [ 266.693243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.728374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:38 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) 05:32:38 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000080)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 05:32:38 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @broadcast, @val, {@ipv4}}, 0x0) 05:32:38 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv6}}, 0x0) 05:32:38 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000300)='R', 0x1, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x1c}, 0x1c) 05:32:38 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000180), 0x4) 05:32:38 executing program 0: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x33, 0x0, 0x0) 05:32:38 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000800)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@authinfo={0x10}], 0x10}, 0x6010d) 05:32:38 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='f', 0x1}], 0x1}, 0x0) [ 267.060372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f00000000c0), 0x4b) 05:32:39 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xffffffffffffff5f, 0x1c, 0x2}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)=0xa0) [ 267.107862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.170119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="10024e200000000000000000400000000000000000257f56431aecaf35d40000000000000000000000000000000000000000000000000000000000000000000000000000000000e957909e4265c108b5fe59c437000000000000000000000000000000000000000000000000000000000000000002000000000000000000d6d7423d65ca16e13ca11315e0d733"], 0xa0) 05:32:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[{0x10}], 0x10}, 0x20083) 05:32:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4075, 0xfe2}], 0x1, 0x0, 0xfffffffffffffeef}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/13, 0xd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r5, &(0x7f0000000d80)="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", 0x2c63) shutdown(r4, 0x0) 05:32:39 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000080)={0xfffffffffffffff0, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="10024e200000000000000000400000000000000000259c1f5f84037f56431aecaf35d40000000000000000000000000000000000000000000000000000000000000000000000000000000000e957909e4265c108b5fe59c437000000000000000000000000000000000000000000000000000000000000000002000000000000000000d6d7423d65ca16e13ca113"], 0xa0) 05:32:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x100) 05:32:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 05:32:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0xefcf, 0x4) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) 05:32:39 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080), 0x8c) 05:32:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x8002, &(0x7f00000000c0), 0xa0) 05:32:39 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f0000001340)={&(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000027c0)="72c96bf8da1986325f18ac405a834257412dd017281ec276ccdd1eb0d431a4ea7ac8d9bdcbe70e425efd8d6cf90fd57c4335664490d356d4e04c6ef4c5d6612536d50dfa7878edc242684740d5eeb33887d55ea88a5bb88832deb2f019efd3fb57c51ab03df8d840460ce59f2692358cb5809459e28c75ef73204e60d7", 0x7d}, {&(0x7f0000000100)="6b28b3ba378c71a29913c375bf817520a1e222d96cb8e82de44f7f2b9fcb0b5c3a6ffb976170789e4ded669e31dd38502047593df4ba4eced9b957f1d956f058cc7ffc449f12a763af8de0516d141544166a5aaae1a6b807057764f8df4b501f649c13b279ae50570fc7def314c1bb1039527096de5d568263d26e7c2f41b0a20a636975a14366c8046f860cb9abb9d6260698ff83afc3", 0x97}, {&(0x7f00000001c0)="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", 0x104e}, {&(0x7f00000011c0)="49fb759293483dbf5bbc74ba6faeb0eb2beba18b7372b22715986da5b1033269981a59d689059ddc499a1d8a41f049399158c21b22f96dbceb5686889a26d7f21332e78f8b94d237c75c886f3a10804fa135bbac523d7a516feb5025a731efd27353161687886791fbf9fdf2ec38462581cbe8ad6acc485fcca0818c88631a1a7ce666c2b7414b5311d406330540ab022ce0163b7d8b96855ab51475b02a4e99c4a2ecbb6cd94b5ff512947293b551cf344d0a93b2ee66ba44d7fa5cf00661d2025a10e944cb3e35d6bde73cfb1b96", 0xcf}], 0x4, &(0x7f0000001300), 0x40}, 0x0) 05:32:39 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:39 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) 05:32:39 executing program 3: r0 = socket$inet6(0x1c, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140), 0x4) 05:32:39 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f00000016c0)=ANY=[], &(0x7f0000001700)=0x8) r2 = socket$inet6_sctp(0x1c, 0x5, 0x84) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0x100, &(0x7f0000000100)={r4}, &(0x7f00000001c0)=0xb0) 05:32:40 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="10024e200000000000000000400000000000000000259c1f5f84037f56431aecaf35d40000000000000000000000000000000000000000000000000000000000000000000000000000000000e957909e4265c108b5fe59c437000000000000000000000000000000000000000000000000000000000000000002000000000000000000d6d7423d65ca16e13ca113"], 0xa0) 05:32:40 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000140), 0x4) 05:32:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80, &(0x7f0000000000)=0xfffffffd, 0x4) 05:32:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)='@', 0x1}], 0x1, &(0x7f0000000340)=[{0xc}], 0xc}, 0x0) 05:32:40 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x9, &(0x7f00000000c0)=0x3ff, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)='f', 0x1}], 0x1}, 0x0) 05:32:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000), 0x4) 05:32:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x40000001, 0x0) 05:32:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) sendto$unix(r2, &(0x7f00000002c0)="9c", 0x1, 0x0, 0x0, 0x0) 05:32:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff08}, 0x0) 05:32:40 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x4a, 0x0) 05:32:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:40 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x244c42, 0xd2) 05:32:40 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) sendto$unix(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 05:32:40 executing program 3: symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') 05:32:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xcc0, 0x0) 05:32:40 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000400), 0x0, 0x0, 0x0) 05:32:40 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 268.528751] gretap0: refused to change device tx_queue_len 05:32:40 executing program 3: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 268.573211] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x80, &(0x7f0000004cc0)) 05:32:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0/file0\x00', 0xc6728c70387770bd) 05:32:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) ioctl$VT_RELDISP(r0, 0x5605) 05:32:40 executing program 0: semget(0x0, 0x0, 0x1) 05:32:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x60, 0x0) 05:32:40 executing program 3: r0 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000100)=""/95) 05:32:40 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 05:32:40 executing program 4: r0 = inotify_init() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') r2 = dup3(r1, r0, 0x0) fchmodat(r2, &(0x7f00000001c0)='.\x00', 0x28) [ 268.861865] gretap0: refused to change device tx_queue_len [ 268.884202] audit: type=1400 audit(1601789560.712:11): avc: denied { setattr } for pid=10026 comm="syz-executor.4" name="fd" dev="proc" ino=36154 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 05:32:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:40 executing program 4: r0 = shmget(0x3, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x2000) 05:32:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x40000) 05:32:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) [ 268.906635] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:40 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) 05:32:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, 0x0, 0x0, 0x4000) 05:32:40 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:40 executing program 3: semget$private(0x0, 0x6, 0x5d8) 05:32:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup3(r1, r0, 0x0) write$nbd(r2, 0x0, 0x0) 05:32:40 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 05:32:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000028) 05:32:40 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000004c80)='./file0\x00', 0x0, 0x800, &(0x7f0000000040)) [ 269.143890] gretap0: refused to change device tx_queue_len 05:32:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x10, &(0x7f0000000080)) 05:32:41 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 269.182818] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:41 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x28c000, 0x109) 05:32:41 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000000c0)=0xffffff9f) 05:32:41 executing program 0: mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000c) 05:32:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x41, 0x0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 05:32:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:41 executing program 3: semget(0x3, 0x2, 0x332) 05:32:41 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) 05:32:41 executing program 1: timer_create(0x0, 0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 05:32:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x182) 05:32:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x800, &(0x7f0000004cc0)) 05:32:41 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000040)='id_legacy\x00', 0x0, 0x0) io_setup(0x0, &(0x7f0000000040)) 05:32:41 executing program 4: fchmodat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0) [ 269.539703] gretap0: refused to change device tx_queue_len 05:32:41 executing program 0: r0 = semget(0x0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}], 0x1) 05:32:41 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40141, 0x0) write$nbd(r0, 0x0, 0x66) [ 269.578068] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x1ecb1cf1dc6c826e) 05:32:41 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 05:32:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:41 executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1591c1, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x10, &(0x7f0000004cc0)) 05:32:41 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 05:32:41 executing program 2: r0 = shmget(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/131) 05:32:41 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self\x00', 0x351c8fc06da7f479, 0x0) 05:32:41 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x60) 05:32:41 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, 0x0, 0x10000) 05:32:41 executing program 0: shmget(0x3, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) 05:32:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x2004e841) 05:32:41 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x202000, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) [ 269.852695] gretap0: refused to change device tx_queue_len [ 269.881755] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:41 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) 05:32:41 executing program 2: madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb) 05:32:41 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:41 executing program 1: syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x0, 0x46c01) 05:32:41 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000600)) 05:32:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r0, &(0x7f0000002340)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@iv={0x28, 0x117, 0x2, 0xd, "577280b8896ed8ee4e608587ca"}], 0x28}], 0x1, 0x0) 05:32:41 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x4020940d, &(0x7f0000000000)=@req={0x28, &(0x7f0000000080)={'vlan0\x00', @ifru_addrs=@ipx}}) 05:32:41 executing program 2: pipe(&(0x7f00000068c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r0, 0x5452, &(0x7f0000000000)=@buf={0x1, &(0x7f00000001c0)="80"}) 05:32:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="10000000dbdf25"], 0x10}], 0x1}, 0x0) 05:32:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000680)=[{0x0, 0x0, 0xa3d3}, {&(0x7f0000000400)="125ae72f5cf41a152dfd685a043b54daf9", 0x11, 0x5}], 0x88, &(0x7f0000000780)) 05:32:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8953, &(0x7f0000000000)={0x2, @l2tp={0x2, 0x0, @broadcast}, @phonet={0x23, 0xff, 0x1, 0x2}, @xdp}) r1 = msgget(0x1, 0x0) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000080)=""/37) 05:32:42 executing program 2: semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}], 0x1) [ 270.196134] gretap0: refused to change device tx_queue_len 05:32:42 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x5}, {}], 0x2, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x3f, 0x1000}], 0x1) [ 270.258097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 270.275660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57307 sclass=netlink_route_socket pid=10191 comm=syz-executor.0 [ 270.298772] FAT-fs (loop4): bogus logical sector size 5402 05:32:42 executing program 2: socketpair(0x2, 0x2, 0x0, &(0x7f0000009200)) [ 270.345798] FAT-fs (loop4): Can't find a valid FAT filesystem 05:32:42 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:42 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 05:32:42 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3e80}}, 0x0) 05:32:42 executing program 2: r0 = epoll_create1(0x0) ppoll(&(0x7f0000000100)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 270.433235] FAT-fs (loop4): bogus logical sector size 5402 [ 270.445729] FAT-fs (loop4): Can't find a valid FAT filesystem 05:32:42 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x401070ca, 0x0) 05:32:42 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8440, 0x802) write$FUSE_LSEEK(r0, 0x0, 0x0) 05:32:42 executing program 0: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[{0x0}], 0x0, 0x0) 05:32:42 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:42 executing program 0: sysfs$2(0x2, 0x292e, 0x0) 05:32:42 executing program 1: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x200080) 05:32:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) 05:32:43 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYRESHEX]) 05:32:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 05:32:43 executing program 0: syz_mount_image$vfat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) 05:32:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 271.205283] tmpfs: Bad value '0x00000000000000000xffffffffffffffff' for mount option 'gid' [ 271.246798] tmpfs: Bad value '0x00000000000000000xffffffffffffffff' for mount option 'gid' 05:32:43 executing program 2: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080), 0x2, 0x0) 05:32:43 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x3ff) write$FUSE_GETXATTR(r1, &(0x7f0000000580)={0x18}, 0x18) 05:32:43 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1, 0x0) 05:32:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(0xffffffffffffffff) 05:32:43 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0x125e, 0xffffffffffffffff) 05:32:43 executing program 0: socketpair(0x22, 0x0, 0x8, &(0x7f0000000040)) 05:32:43 executing program 4: munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 271.490107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:43 executing program 3: renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 05:32:43 executing program 1: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 05:32:43 executing program 2: rt_sigqueueinfo(0x0, 0x41, &(0x7f0000000000)={0x0, 0x0, 0x5}) [ 271.544608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:43 executing program 4: r0 = getpgid(0x0) ptrace$setsig(0x4203, r0, 0x0, 0x0) sync() ptrace$setsig(0x4203, 0x0, 0x0, 0x0) [ 271.593993] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:43 executing program 0: r0 = openat$rtc(0xffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 05:32:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 05:32:43 executing program 2: openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001e80)='team\x00') 05:32:43 executing program 3: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 05:32:43 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(0xffffffffffffffff) 05:32:43 executing program 4: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000007c0), 0x0, 0x0) 05:32:43 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) 05:32:43 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x418680, 0x0) 05:32:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0207ff031e0000002cbd7000fedbdf2504000400090000004d000000000000001f00000000000000040000000000000018001800013fb300a9877bfe38951d68b0e44fb8b965"], 0xf0}}, 0x20000) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) 05:32:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000007800)='/dev/full\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) 05:32:44 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x262001, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 05:32:44 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x268ee84d4f22ab66, r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, {0x2, 0x0, @broadcast}, 0x194, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}) gettid() 05:32:44 executing program 3: capset(&(0x7f0000001040)={0x19980330}, &(0x7f0000001080)) add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 272.172399] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:44 executing program 0: epoll_pwait(0xffffffffffffffff, &(0x7f0000000400)=[{}], 0x1, 0x0, 0x0, 0x0) [ 272.214909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.247828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:44 executing program 1: mount$fuseblk(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x909402, 0x0) 05:32:44 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000001100)='/dev/full\x00', 0x8bb6e56c4923036, 0x0) [ 272.263458] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 05:32:44 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(0xffffffffffffffff) 05:32:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x1b8, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'ipvlan1\x00', 'veth0_vlan\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@inet=@length={{0x28, 'length\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@inet=@SET2={0x30, 'SET\x00'}}, {{@ip={@local, @loopback, 0x0, 0x0, 'lo\x00', 'wlan1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 05:32:44 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) 05:32:44 executing program 1: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x81368e07caf8ccdd) [ 272.513778] x_tables: duplicate underflow at hook 2 [ 272.572885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 272.596097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.617432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:44 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xca00, 0x0) 05:32:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x4) preadv2(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x0, 0x0) 05:32:44 executing program 0: mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe000, 0x0, &(0x7f0000ff2000/0xe000)=nil) 05:32:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x800) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 05:32:44 executing program 3: capset(&(0x7f0000001040)={0x19980330}, &(0x7f0000001080)) semget(0x2, 0x0, 0xa8) 05:32:44 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[], 0x36a) 05:32:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000001180)='/dev/net/tun\x00', 0x0, 0x0) [ 272.837682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 05:32:44 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000001c00)=[{&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2, &(0x7f0000000c80)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) 05:32:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7}, 0x7) 05:32:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000002c0)=""/4096, 0x2a, 0x1000, 0x8}, 0x20) [ 272.927132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 272.955846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:44 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) 05:32:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x1c) 05:32:44 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setopts(0x11, r1, 0x0, 0x0) 05:32:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0xd}, 0x1c) 05:32:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup2(r1, r0) write$FUSE_NOTIFY_DELETE(r2, 0x0, 0x0) [ 273.123462] ptrace attach of "/root/syz-executor.3"[6485] was attempted by "/root/syz-executor.3"[10477] [ 273.155284] ptrace attach of "/root/syz-executor.3"[6485] was attempted by "/root/syz-executor.3"[10487] 05:32:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) r1 = dup2(r0, r0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0x7d2) 05:32:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) 05:32:45 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20}, 0x0) 05:32:45 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x204280, 0x0) unshare(0x8020400) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 05:32:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) connect$inet6(r0, 0x0, 0x0) 05:32:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}}, 0x1c) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_ATTR(r1, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r1, 0x0, 0x0) 05:32:45 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r0, 0x401012fc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add12ae18e13b1fbd14dade59e0dbdefaeb3d4c975b9ce5b06e58e929c2dc5a54dbf7887c6dcefca909d6618", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9"}) 05:32:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup2(r0, r0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000002100)=0x54) 05:32:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x2, 0x0, 0x0, @local}, 0x1c) [ 273.317086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, &(0x7f0000000000), 0x4) 05:32:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000002c0)={0x3, {{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x3}}, {{0xa, 0x4e22, 0x0, @remote}}}, 0x108) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0x100000110) r3 = epoll_create(0x2000008) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44040}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xb0000001}) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x1, 0x2e0) epoll_wait(r3, &(0x7f0000000080)=[{}], 0x1, 0x7fff) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\t \x00', 0x8, 0x3a, 0x0, @rand_addr=' \x01\x00', @local, {[], @echo_request}}}}}, 0x0) [ 273.375008] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.407420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.569980] audit: type=1400 audit(1601789565.402:12): avc: denied { block_suspend } for pid=10525 comm="syz-executor.2" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 05:32:45 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:45 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 05:32:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x8020400) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) 05:32:45 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r1, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 05:32:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) write$P9_RRENAMEAT(r1, 0x0, 0x0) 05:32:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x29, 0x0, 0x9, 0x0, 0x0, @empty, @dev}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 05:32:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x4e, 0x1}]}}, &(0x7f00000012c0)=""/4092, 0x2a, 0xffc, 0x1}, 0x20) 05:32:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000140)=""/4096, 0x26, 0x1000, 0x1}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) [ 273.734850] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/4096, 0x1000000, 0x1000, 0x1}, 0x20) [ 273.797432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:45 executing program 1: bpf$BPF_BTF_LOAD(0x11, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 273.841411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:45 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440), 0xfe97) [ 273.992714] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.067406] syz-executor.4 (10574) used greatest stack depth: 23504 bytes left 05:32:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82d28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:32:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4fedb5621d3a31c3) 05:32:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000400)=""/170, 0x32, 0xaa, 0x1}, 0x20) 05:32:46 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x29, 0x0, 0x9, 0x0, 0x0, @empty, @dev}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000040)) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3f000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 05:32:46 executing program 3: io_setup(0x1fe, &(0x7f0000000040)=0x0) io_submit(r0, 0x0, 0x0) io_submit(r0, 0x0, 0x0) 05:32:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000540)={0x2, &(0x7f0000000500)=[{}, {0x5}]}) 05:32:46 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x4a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') sendfile(r0, r1, 0x0, 0x88004) [ 274.529307] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:46 executing program 1: io_setup(0x7, &(0x7f0000000000)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f00000026c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 05:32:46 executing program 3: io_setup(0x0, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) 05:32:46 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f0000000480)='./bus\x00') rmdir(&(0x7f0000000280)='./bus/file0\x00') symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus/file0\x00') 05:32:46 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) [ 274.578809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 274.647392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 274.725172] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 05:32:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 05:32:46 executing program 0: socket(0x18, 0x0, 0x11f036ca) 05:32:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0xfffffffffffffdba) [ 274.826823] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.994880] overlayfs: maximum fs stacking depth exceeded [ 275.041493] overlayfs: filesystem on './bus' not supported as upperdir 05:32:47 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x11, 0x3, &(0x7f0000002100)=@framed, &(0x7f0000002140)='GPL\x00', 0xca31, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:47 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x120, 0x10000}], 0x0, &(0x7f0000000140)) 05:32:47 executing program 1: process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/153, 0x99}], 0x1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 05:32:47 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x10, r0, 0x0) 05:32:47 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x44810, 0x0, 0x0) 05:32:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @private}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x48) [ 275.253163] audit: type=1400 audit(1601789567.083:13): avc: denied { execute } for pid=10653 comm="syz-executor.4" path="pipe:[37878]" dev="pipefs" ino=37878 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 275.283076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:47 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "84cd8b", 0x81}) [ 275.316636] BTRFS: device fsid f90cac8b-044b-4fa8-8bee-4b8d3da88dc2 devid 1 transid 7 /dev/loop2 [ 275.333646] BTRFS error (device loop2): superblock checksum mismatch 05:32:47 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x100000000007d) io_setup(0x0, &(0x7f0000000380)=0x0) io_destroy(r1) semget(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0x1, &(0x7f0000000080)}, 0x20) socket$netlink(0x10, 0x3, 0x0) 05:32:47 executing program 0: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x2200) 05:32:47 executing program 1: socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0x2) [ 275.363051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.373943] BTRFS error (device loop2): open_ctree failed [ 275.418606] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.455292] BTRFS error (device loop2): superblock checksum mismatch [ 275.482940] BTRFS error (device loop2): open_ctree failed 05:32:47 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}], 0x8) 05:32:47 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) 05:32:47 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x100000000007d) io_setup(0x0, &(0x7f0000000380)=0x0) io_destroy(r1) semget(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0x1, &(0x7f0000000080)}, 0x20) socket$netlink(0x10, 0x3, 0x0) 05:32:47 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x100000000007d) io_setup(0x0, &(0x7f0000000380)=0x0) io_destroy(r1) semget(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0x1, &(0x7f0000000080)}, 0x20) socket$netlink(0x10, 0x3, 0x0) 05:32:47 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "84cd8b", 0x0, 0xff}) 05:32:47 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) 05:32:47 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f00000000c0)) 05:32:47 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 275.744937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.799942] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.823062] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:48 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002280)={0x11, 0x3, &(0x7f0000002100)=@framed, &(0x7f0000002140)='GPL\x00', 0x0, 0x7b, &(0x7f0000002180)=""/123, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)) 05:32:48 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40, 0x0) 05:32:48 executing program 3: syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x220e, 0x200) 05:32:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:48 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) 05:32:48 executing program 4: socket(0x25, 0x1, 0x6) 05:32:48 executing program 1: ioperm(0x0, 0x8716, 0x531) 05:32:48 executing program 0: process_vm_writev(0x0, &(0x7f0000000000), 0x2, 0x0, 0x0, 0x0) 05:32:48 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) [ 276.259159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:48 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:48 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)) 05:32:48 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000480), 0x10) [ 276.329668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.354867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:48 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000006c0)={0x9}) 05:32:48 executing program 3: memfd_create(&(0x7f0000001580)='*!&\x00', 0x0) 05:32:48 executing program 2: ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000500)}, {&(0x7f0000000580)="80a1bf7d96df05994bf9292a393e15e0516705cab9c62ea2c0f1a2273efcd716b56662887a4457a73f422e218b50221f41b42b78a1bc0708a323d4a2fa37d24393ccf84f9ba7adf0f64ab76dba5c910fb11253a0aaff01ef67368ff623b5bb037b9b907ee027ac7f70047b632e7a88988aff439aa5829585afbe6fb5ab55808c1e7c0a70478b09aba546738302c5d4d1e5434df80bc9466f71d5b027ca4c229ca0ed6e795310eda9d60d6f08a26176ce56cffbd1050df22484daf269", 0xbc}], 0x3, &(0x7f00000006c0)=[{0x88, 0x7, 0x0, "045e63a0036e620e06c0febc198c129455d3e006e264b848c51592fe3b7a7a68f0899cf46c325003048d060df9a85ab75efa075f1ce5afc50159f0fce18b07786a845d54a0259700ca5363ae69f9c458022cdf6802a28a35dd0a79f029947bddb1e0649ef399d41becc9dd13abd36a606097"}, {0xc8, 0x103, 0x0, "2b4a377b536a743b939982a8e3acf6cd938b99d5ea0dfd8cf77c2b3c55b077cf56a1087f854174df769334f3f881811b62724f9f26fe867c11fba2886c809ccf9e70ff4a9e61619078ed8b67fc6ba1fc937ccd183e7bd1f96be8d54c34252d018ca9403ce19376186c2a465fb59a6f71016038d9717889fdd92d5ef11d412acc06c914a5ea76dc12637761b35eda6c01456db9588a3e8f32ff2060f59130074efa62661fa139109eef431ec85f0eceb1f9e87e247f53"}, {0x10, 0x10c, 0x2}, {0x78, 0x1, 0x7fff, "bdc28e516c281de0b8f03adafe5d1fabd974aac9f6e35df246d91d8e52b8a2c889bb5a1b7592b200fb79817ed49e3d38357c7d41cb9e13d0d5025d2a51fbc3636d826ce00ee30212d8a8cb0e576bfb5ba681d11bcb1fa18dcec1355063161d395e0dffa592d6ea"}, {0x10, 0xff, 0x20}, {0x10, 0x116}, {0x18, 0x0, 0x4, "0fc4a123a830"}, {0x18, 0x101, 0x0, "2efe578699aa"}], 0x228}, 0x1) modify_ldt$read_default(0x2, &(0x7f0000000c40)=""/40, 0x28) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000c80)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000dc0)={&(0x7f0000000d80)='./file0\x00', 0x0, 0x20}, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000e80)={0x7, 0x0, {0x56, 0xc000, 0x7f, {0x6000, 0x100}, {0x80}, @period={0x59, 0xb4, 0xd8, 0x0, 0x0, {0x4, 0x4, 0x6, 0x8}, 0x4, &(0x7f0000000e40)=[0xe000, 0x0, 0x162, 0x0]}}, {0x54, 0x0, 0x0, {0x2}, {0xf66}, @rumble={0x1ff, 0x3}}}) timer_getoverrun(0x0) request_key(&(0x7f00000010c0)='id_legacy\x00', &(0x7f0000001100)={'syz', 0x0}, &(0x7f0000001140)='\x00', 0xfffffffffffffffe) shmget(0x3, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={0x0}}, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={0x0}}, 0x14) openat$uinput(0xffffffffffffff9c, &(0x7f0000002840)='/dev/uinput\x00', 0x0, 0x0) 05:32:48 executing program 4: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000540)='ns/net\x00') 05:32:48 executing program 1: timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, &(0x7f0000000180)) 05:32:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002840)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000002880)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) 05:32:48 executing program 0: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='trusted\x00', 0x0, 0x0, 0x0, r0) 05:32:48 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000200)={0x1}) 05:32:48 executing program 4: waitid(0x1, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)) 05:32:48 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, r1) 05:32:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) 05:32:48 executing program 0: timer_create(0x0, 0x0, &(0x7f0000004780)) 05:32:48 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) [ 276.677257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001800)={0xec4, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0xeb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a1c3dc5fd05b909ab56a05baeab2b4159ff96414bb"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "019b5cdd8a481b5b75067418c460801da919ed6e4f"}}, @TIPC_NLA_NODE_ID={0xe1d, 0x3, "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"}]}]}, 0xec4}}, 0x0) 05:32:48 executing program 3: add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, 0x0) [ 276.752356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.777181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'blake2b-512-generic\x00'}}, 0x0, 0x0) 05:32:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:48 executing program 0: openat$vim2m(0xffffffffffffff9c, &(0x7f0000003140)='/dev/vim2m\x00', 0x2, 0x0) 05:32:48 executing program 3: timer_create(0x0, 0x0, &(0x7f0000001080)) timer_getoverrun(0x0) 05:32:48 executing program 2: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000000)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0) 05:32:48 executing program 4: setfsgid(0xee01) 05:32:48 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000400)={0x2, 0x0, @multicast1}, 0x10) 05:32:48 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002840)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) 05:32:48 executing program 4: socketpair(0xf, 0x3, 0x0, &(0x7f0000000040)) 05:32:48 executing program 0: add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 05:32:48 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x140d, 0x1}, 0x10}}, 0x0) 05:32:48 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002840)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x418c}}) [ 277.035532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.055832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.066897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000003140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x2}) 05:32:49 executing program 4: socketpair(0x15, 0x0, 0x0, &(0x7f0000000240)) 05:32:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002840)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000002880)={'syz1\x00', {}, 0x0, [0x7, 0x20, 0x844f, 0x1b, 0x2, 0xfffffc01, 0x7f, 0x7cc, 0x6, 0x1, 0x7, 0x1, 0x0, 0x1, 0x8f, 0x1, 0x7feb, 0x2, 0x2, 0x100, 0x0, 0x1, 0x1, 0x7, 0xe76, 0x6, 0x3, 0xc73b, 0x1f, 0x7ff, 0x80, 0x401, 0x3, 0x9], [0x81, 0x3, 0xfffffe00, 0x6, 0x5f1, 0x5, 0x856, 0x2, 0x400, 0x99, 0xcf8, 0x8, 0xf8e9, 0x3, 0x4f45, 0x5, 0xffff, 0x5, 0x8001, 0x5a6, 0x9008, 0x7, 0x9, 0x3ff, 0xfff, 0xc3, 0xb2, 0x3f, 0x0, 0x8000, 0x10001, 0x7, 0x1ff, 0x8, 0x1, 0x8001, 0xfffffe00, 0x200, 0x81, 0xfffffbff, 0x9a8, 0xdf, 0xffff, 0x1ff, 0x8, 0x4, 0x8, 0x10000, 0xffffffff, 0x2, 0x7, 0x6, 0x8, 0x6, 0xdf, 0x2, 0x5, 0xffffff4e, 0x0, 0x7, 0xf9c, 0x7, 0x4, 0x3f], [0x1, 0x6000, 0x8001, 0x3, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x81, 0x5, 0x4, 0x9, 0x1000, 0x8, 0x1, 0x7, 0xb166, 0x4, 0x7, 0x1, 0x9, 0x0, 0x7fff, 0x2d, 0x100, 0x6, 0x6, 0x7, 0x87, 0x1, 0x1f, 0x2, 0x0, 0x1, 0x5, 0xfffff801, 0x7, 0x3, 0x7, 0x0, 0xfff, 0x8000, 0x400, 0x0, 0x1000, 0xffffffff, 0xd13, 0x20, 0x80000001, 0x2, 0x101, 0x6, 0x0, 0x3ff, 0x9, 0x1f, 0x80000001, 0xffffff30, 0x5, 0x0, 0x5e50, 0xff], [0xfffffffc, 0xbf0, 0xf3, 0x1, 0x4, 0x0, 0xffffffe0, 0x1, 0x3, 0x10000, 0x9, 0x3, 0x0, 0xf26b, 0x8, 0xf69b, 0x3f, 0x800, 0xffffffff, 0x6, 0x1, 0xfffff6e3, 0xdde, 0x9, 0x200, 0x800, 0x7, 0x4, 0x6, 0x5, 0x3, 0x587a, 0x7, 0x0, 0xffffffff, 0x6, 0x0, 0x3, 0xcc9d, 0x5, 0x9, 0x400, 0x1ff, 0x80, 0x6, 0x182, 0x8, 0x1ff, 0x3f82, 0xece6, 0x3, 0x4, 0x8, 0x6db, 0x242b, 0x40000, 0x1f, 0x9, 0x36c, 0x3, 0x8, 0x8, 0x8000000, 0xffff]}, 0x45c) 05:32:49 executing program 0: keyctl$search(0xa, 0x0, &(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0) 05:32:49 executing program 3: pipe2$9p(&(0x7f0000000040), 0x80800) getpgrp(0x0) pipe2$9p(&(0x7f0000000200), 0x0) 05:32:49 executing program 4: pipe2$9p(&(0x7f0000000040), 0x0) 05:32:49 executing program 2: pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000580)={0x14}, 0x14) 05:32:49 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002740)='/dev/fuse\x00', 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000002780)) [ 277.292362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:49 executing program 1: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002a40)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 05:32:49 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000001740)='/dev/nvram\x00', 0x302, 0x0) 05:32:49 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101643, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) [ 277.355775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.386603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.418852] Bluetooth: hci0: command 0x0401 tx timeout 05:32:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1310], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0154fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe28, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 05:32:49 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RRENAME(r0, &(0x7f0000000140)={0x7}, 0x7) write$P9_RREADLINK(r0, &(0x7f0000000540)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) 05:32:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:49 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/mnt\x00') 05:32:49 executing program 3: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x20000000, 0x0) 05:32:49 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000029c0)) 05:32:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/1310], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="2e00000033000535a4abd32b8018007a0154fc60100002400c00020005", 0x1d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe28, 0xfffffe6f, &(0x7f0000000100)="280e003f4305607e5bc5795e6558000800ffffffba0e7200ffff81", 0x0, 0x100, 0xf2ffffff, 0xffffffffffffffb4, 0x212, &(0x7f0000000940)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) 05:32:49 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0xc441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48110}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x1, 0x985, &(0x7f0000002180)=""/4112, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r1, r2, 0x25}, 0x10) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000002480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1721cd89328df42b, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240)}, 0x6a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) close(r3) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7, 0x200, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000003c0), 0xb}, 0x0, 0x200, 0x0, 0x1, 0xfffffffffffffff7, 0x0, 0x6d}, 0x0, 0x1, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 277.791271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:49 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500)='ethtool\x00') sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 05:32:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) [ 277.897781] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.934560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.976144] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:49 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="004ef6cc28870049a8f536c9f948f44e496f292d0f8119e45e157a10052d18716b08cced8052d20b751199bf4dc0c41ffd"]) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:49 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x2, &(0x7f00000008c0)=[{}, {0x100}]}) [ 278.009427] EXT4-fs error (device loop1): ext4_empty_dir:2739: inode #12: block 255: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 05:32:49 executing program 3: request_key(&(0x7f0000000380)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffb) 05:32:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x78}}, 0x0) [ 278.111220] EXT4-fs warning (device loop1): ext4_empty_dir:2742: inode #12: comm syz-executor.1: directory missing '.' [ 278.127429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 05:32:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) [ 278.171313] EXT4-fs error (device loop4): ext4_empty_dir:2734: inode #12: comm syz-executor.4: Directory hole found for htree leaf block [ 278.186070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @qipcrtr, @isdn, @generic={0x0, "1ca3f49b0d802bd95aeeea438903"}}) 05:32:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) [ 278.211782] EXT4-fs error (device loop4): ext4_free_inode:350: comm syz-executor.4: bit already cleared for inode 12 [ 278.229089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:392: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 278.255406] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:50 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x0) [ 278.279723] EXT4-fs error (device loop1) in ext4_free_blocks:4971: Corrupt filesystem [ 278.292909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.306623] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:32:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:50 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/hwrng\x00', 0x6ba000, 0x0) 05:32:50 executing program 2: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 05:32:50 executing program 0: keyctl$dh_compute(0x17, &(0x7f00000003c0), 0x0, 0x0, 0x0) 05:32:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:50 executing program 3: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) 05:32:50 executing program 0: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x40000) 05:32:50 executing program 4: pselect6(0x40, &(0x7f0000000100)={0x77b9}, 0x0, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200), 0x8}) 05:32:50 executing program 2: syz_open_dev$binderN(0x0, 0x0, 0x0) [ 278.537701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:50 executing program 3: request_key(&(0x7f0000000380)='ceph\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='#\\:=\x88,\x00', 0xfffffffffffffffb) 05:32:50 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) 05:32:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="78000000000803"], 0x78}}, 0x0) [ 278.583123] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 278.595879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.618582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="004ef6cc28870049a8f536c9f948f44e496f292d0f8119e45e157a10052d18716b08cced8052d20b751199bf"]) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8929, &(0x7f0000002000)={'sit0\x00', 0x0}) [ 278.711378] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. 05:32:50 executing program 0: r0 = socket(0x28, 0x80001, 0x0) unshare(0x400) getsockname(r0, 0x0, &(0x7f00000001c0)) 05:32:50 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:50 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 05:32:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) [ 278.865164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 278.902732] EXT4-fs error (device loop2): ext4_empty_dir:2734: inode #12: comm syz-executor.2: Directory hole found for htree leaf block 05:32:50 executing program 4: r0 = socket(0x28, 0x80001, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0) 05:32:50 executing program 0: shmctl$SHM_LOCK(0x0, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_UNLOCK(0x0, 0xc) [ 278.927972] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 278.955109] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:50 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0xfffffffffffffd9a) [ 278.987154] EXT4-fs error (device loop2): ext4_free_inode:350: comm syz-executor.2: bit already cleared for inode 12 [ 278.999060] EXT4-fs error (device loop1): ext4_empty_dir:2739: inode #12: block 255: comm syz-executor.1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0, size=1024 [ 279.040615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_delrule={0x60, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vlan1\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'virt_wifi0\x00'}]}, 0x60}}, 0x0) 05:32:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="004ef6cc28870049a8f536c9f948f44e496f292d0f8119e45e157a10052d18716b08cced8052d20b751199bf"]) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 279.081388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.095491] EXT4-fs warning (device loop1): ext4_empty_dir:2742: inode #12: comm syz-executor.1: directory missing '.' [ 279.124711] EXT4-fs error (device loop1): ext4_validate_block_bitmap:392: comm syz-executor.1: bg 0: block 3: invalid block bitmap [ 279.144044] EXT4-fs error (device loop1) in ext4_free_blocks:4971: Corrupt filesystem [ 279.152824] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:32:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:51 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002300)={0x2020}, 0x2020) read$FUSE(r0, 0x0, 0x0) 05:32:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, 0x0, 0xf5ffffff00000000, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) 05:32:51 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:32:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:51 executing program 0: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x7fffdf802000, 0x800000, 0x3, &(0x7f00007fd000/0x800000)=nil) munmap(&(0x7f0000e15000/0x4000)=nil, 0x4000) [ 279.325246] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 279.337736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:51 executing program 4: setrlimit(0x7, &(0x7f0000000040)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0) [ 279.386558] EXT4-fs error (device loop2): ext4_empty_dir:2734: inode #12: comm syz-executor.2: Directory hole found for htree leaf block [ 279.405134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000002c40)={&(0x7f0000001880)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000002c00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xae}}], 0x18}, 0x8000904) 05:32:51 executing program 0: syz_mount_image$afs(&(0x7f0000000080)='afs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x800001, &(0x7f0000001180)) [ 279.444871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.471698] EXT4-fs error (device loop2): ext4_free_inode:350: comm syz-executor.2: bit already cleared for inode 12 [ 279.500974] Bluetooth: hci0: command 0x0401 tx timeout [ 279.511266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:32:51 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 05:32:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r1, 0x50d, 0x0, 0x0, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) 05:32:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:51 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010aeed, &(0x7f00000000c0)) 05:32:51 executing program 3: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000440)) 05:32:51 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) [ 279.718349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 05:32:51 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0x0, r1}, 0x50) 05:32:51 executing program 2: syz_mount_image$msdos(&(0x7f0000000440)='msdos\x00', &(0x7f0000000480)='./bus\x00', 0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000000c40)={[{@fat=@tz_utc='tz=UTC'}]}) 05:32:51 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x937f, 0x0) 05:32:51 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000440)) [ 279.881142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.886915] FAT-fs (loop2): bogus number of reserved sectors [ 279.897116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 279.908714] FAT-fs (loop2): Can't find a valid FAT filesystem 05:32:51 executing program 4: r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x2, r1, 0x0) 05:32:51 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45}, {0x6}]}) [ 279.930972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.945204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:51 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x116) 05:32:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) sendmsg$inet6(r0, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}, 0x0) [ 280.011840] FAT-fs (loop2): bogus number of reserved sectors [ 280.021805] FAT-fs (loop2): Can't find a valid FAT filesystem [ 280.046694] audit: type=1326 audit(1601789571.873:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11123 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x0 05:32:51 executing program 3: syz_read_part_table(0x9b4f0500, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 05:32:52 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) 05:32:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) [ 280.220079] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 280.252900] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) 05:32:52 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 280.271425] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 280.286487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.296537] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 280.315066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.315433] loop3: p2 < > 05:32:52 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xa9) 05:32:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0xc8c, 0x0, 0x0, 0x0) [ 280.469222] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r0) [ 280.623398] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.632944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.639879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:52 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=@raw=[@alu], &(0x7f00000000c0)='GPL\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:52 executing program 4: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/106) 05:32:52 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt(r0, 0x0, 0x0, 0x0, 0x0) 05:32:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:52 executing program 2: setitimer(0x0, &(0x7f0000000000)={{0x0, 0xea60}, {0x77359400}}, &(0x7f0000000040)) 05:32:52 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 280.811336] audit: type=1326 audit(1601789572.643:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11123 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x0 05:32:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'bond_slave_1\x00', {}, 0x6}) 05:32:52 executing program 3: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) semget$private(0x0, 0x0, 0x0) io_setup(0x8001, &(0x7f0000000480)=0x0) io_submit(r0, 0x0, &(0x7f00000004c0)) geteuid() 05:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080), 0x10) 05:32:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:52 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x80) mkdir(0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xac7c) symlink(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40449426, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x3, 0x4, 0x4, 0x100000009}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socketpair(0x3, 0x7, 0x10000, &(0x7f0000000180)) [ 280.926808] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:32:52 executing program 0: pipe(&(0x7f0000000000)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000280)={0x8001, 0x7fff}) [ 280.988108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.015743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:52 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:52 executing program 2: syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x5, 0x2e8441) 05:32:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x62, &(0x7f0000000500)=""/98, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:53 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:53 executing program 2: semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}, {0x4}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x200, 0x1000}, {0x0, 0x9}, {0x0, 0x100}], 0x3) 05:32:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'bond_slave_1\x00'}) 05:32:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, 0x0, 0x0) 05:32:53 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:53 executing program 4: getcwd(&(0x7f00000002c0)=""/168, 0xa8) 05:32:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 05:32:53 executing program 0: io_pgetevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f00000001c0)={[0xfffffffffffffffa]}, 0x8}) [ 281.351372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.367363] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) [ 281.411936] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:53 executing program 2: socketpair(0x22, 0x0, 0x728, &(0x7f0000000140)) 05:32:53 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce], 0x0, 0x6112}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:32:53 executing program 3: semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/32) 05:32:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:53 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) 05:32:53 executing program 4: syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x0, 0x400100) [ 281.645626] kvm: pic: non byte read [ 281.662638] kvm: pic: non byte read [ 281.680576] kvm: pic: non byte read 05:32:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:53 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) [ 281.695026] kvm: pic: non byte read [ 281.703696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.709058] kvm: pic: non byte read [ 281.723964] kvm: pic: non byte read [ 281.739148] kvm: pic: non byte read 05:32:53 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'veth1_macvtap\x00'}) [ 281.752955] kvm: pic: non byte read [ 281.772916] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.773008] kvm: pic: non byte read [ 281.807424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.818805] kvm: pic: non byte read 05:32:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x12, 0x0, 0x0) 05:32:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) 05:32:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) 05:32:53 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:53 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:53 executing program 3: semop(0x0, &(0x7f0000000040)=[{0x0, 0x36}, {}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x200, 0x1000}, {0x0, 0x9}, {0x0, 0x100}], 0x3) 05:32:53 executing program 2: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000240)) io_setup(0x4, &(0x7f0000000040)=0x0) io_destroy(r0) 05:32:53 executing program 4: semop(0x0, &(0x7f0000000040)=[{0x0, 0x36, 0x1000}, {}], 0x2) 05:32:53 executing program 0: semop(0x0, &(0x7f0000000040)=[{0x0, 0x36, 0x1000}, {}], 0x2) semop(0x0, &(0x7f0000000000)=[{0x0, 0x200, 0x1000}, {0x0, 0x9}, {0x0, 0x100}], 0x3) 05:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 282.125291] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.147111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.162404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:54 executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000100)={@broadcast, @empty=[0x4], @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "0489f1", 0x10, 0x11, 0x0, @dev, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 05:32:54 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x9, 0x1000, &(0x7f00000006c0)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{}, {0x18}]}, 0x10) [ 282.352672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.362575] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 282.373685] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 05:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:54 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000005c0)='batadv_slave_0\x00') 05:32:54 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 282.952733] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.962068] audit: type=1400 audit(1601789574.793:16): avc: denied { create } for pid=11415 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 282.969090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 05:32:54 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind(r0, &(0x7f0000000480)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x80) 05:32:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000005c0)='batadv_slave_0\x00') 05:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {0x0}}, 0x18) [ 283.000708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:32:54 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:54 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:54 executing program 0: memfd_create(&(0x7f0000000100)='illinois\x00', 0x0) 05:32:54 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 05:32:55 executing program 3: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff, 0xffffffffffffffff}}) [ 283.137941] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:55 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:55 executing program 0: semop(0x0, &(0x7f0000000040)=[{}], 0x1) 05:32:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:55 executing program 4: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000240)) io_setup(0x4, &(0x7f0000000040)) 05:32:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xaef820426d902c36, 0x2, &(0x7f0000000000)=@raw=[@initr0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:55 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000001200), 0x4) [ 283.301306] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:55 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffffd}, 0x8) 05:32:55 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/136) [ 283.404153] gretap0: refused to change device tx_queue_len [ 283.410789] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x19, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:55 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) 05:32:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) [ 283.493636] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:55 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x17, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:55 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:55 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:55 executing program 3: prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/166) 05:32:55 executing program 4: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000000)=""/4) 05:32:56 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=@raw=[@alu={0x4}], &(0x7f00000000c0)='GPL\x00', 0x5, 0xd9, &(0x7f0000000100)=""/217, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind(r0, 0x0, 0x0) [ 284.203770] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xf, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581", 0x91, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) 05:32:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000480)=@framed, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 284.294115] gretap0: refused to change device tx_queue_len [ 284.316248] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0) 05:32:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000600), &(0x7f00000006c0)=0x14) [ 284.416322] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x9, 0x0, 0x0) 05:32:56 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1e, 0x0, 0x0) 05:32:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x0, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:56 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x22, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x3}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 284.564677] EXT4-fs (loop1): bad geometry: block count 256 exceeds size of device (74 blocks) 05:32:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000100)) 05:32:56 executing program 4: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) socketpair(0x2c, 0x0, 0x0, &(0x7f00000000c0)) 05:32:56 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 284.617518] gretap0: refused to change device tx_queue_len [ 284.652262] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:56 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf393}, 0x78) [ 284.713551] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 284.740164] EXT4-fs (loop2): failed to parse options in superblock: X [ 284.744244] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x8, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 05:32:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 284.770473] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 284.782210] System zones: 0-7 [ 284.798741] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:32:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:32:56 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 284.866441] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:32:56 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x9, 0x4) 05:32:56 executing program 4: 05:32:56 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:32:56 executing program 0: [ 284.935994] gretap0: refused to change device tx_queue_len [ 284.962785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:56 executing program 0: 05:32:56 executing program 4: 05:32:56 executing program 3: 05:32:56 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 285.051721] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 285.090651] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:32:56 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:57 executing program 0: [ 285.141233] EXT4-fs (loop2): failed to parse options in superblock: X 05:32:57 executing program 3: 05:32:57 executing program 4: [ 285.217956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 285.231598] System zones: 0-7 [ 285.236825] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:32:57 executing program 0: 05:32:57 executing program 3: [ 285.271684] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 285.271952] gretap0: refused to change device tx_queue_len [ 285.294712] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue [ 285.335871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:32:57 executing program 4: 05:32:57 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:57 executing program 3: 05:32:57 executing program 0: io_setup(0x4, &(0x7f0000000040)=0x0) io_destroy(r0) io_submit(r0, 0x0, 0x0) 05:32:57 executing program 4: 05:32:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:57 executing program 3: [ 285.485528] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 285.513388] EXT4-fs (loop2): failed to parse options in superblock: X 05:32:57 executing program 4: [ 285.541332] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 285.546064] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 285.556343] System zones: 0-7 05:32:57 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:57 executing program 0: [ 285.587483] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:32:57 executing program 4: [ 285.647436] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue [ 285.664352] gretap0: refused to change device tx_queue_len [ 285.694149] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:32:57 executing program 3: 05:32:57 executing program 0: 05:32:57 executing program 4: [ 285.765771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:57 executing program 3: 05:32:57 executing program 0: 05:32:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:57 executing program 4: 05:32:57 executing program 3: 05:32:57 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {0x0, 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 285.903135] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:32:57 executing program 0: [ 285.946244] EXT4-fs (loop2): failed to parse options in superblock: X [ 285.986239] gretap0: refused to change device tx_queue_len 05:32:57 executing program 4: [ 285.992890] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.028092] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 286.035461] System zones: 0-7 [ 286.079893] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 286.098497] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:32:57 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r0) 05:32:57 executing program 3: 05:32:57 executing program 0: 05:32:57 executing program 4: 05:32:57 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 286.124360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700), 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:58 executing program 0: 05:32:58 executing program 4: 05:32:58 executing program 3: 05:32:58 executing program 0: [ 286.234345] gretap0: refused to change device tx_queue_len [ 286.256862] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:58 executing program 0: 05:32:58 executing program 3: [ 286.356391] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 286.380431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 286.387214] EXT4-fs (loop2): failed to parse options in superblock: X [ 286.428442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 286.443436] System zones: 0-7 [ 286.451916] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 286.468331] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:32:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r0) 05:32:58 executing program 4: 05:32:58 executing program 0: 05:32:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700), 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:58 executing program 3: 05:32:58 executing program 4: 05:32:58 executing program 0: 05:32:58 executing program 3: 05:32:58 executing program 0: [ 286.563531] gretap0: refused to change device tx_queue_len [ 286.573275] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:32:58 executing program 0: [ 286.628759] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 286.728666] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 286.754011] EXT4-fs (loop2): failed to parse options in superblock: X [ 286.777849] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 286.786077] gretap0: refused to change device tx_queue_len [ 286.792361] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 286.794127] System zones: 0-7 [ 286.823870] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 286.834063] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:32:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup(r0) 05:32:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700), 0x0, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:58 executing program 4: 05:32:58 executing program 3: 05:32:58 executing program 0: 05:32:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:58 executing program 4: 05:32:58 executing program 3: 05:32:58 executing program 0: [ 286.986562] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 286.994837] gretap0: refused to change device tx_queue_len 05:32:58 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014", 0x1d, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 287.047428] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:32:58 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:58 executing program 3: [ 287.089929] EXT4-fs (loop2): failed to parse options in superblock: X [ 287.128326] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 287.144969] System zones: 0-7 [ 287.176916] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 287.198431] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 287.217846] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue [ 287.234283] gretap0: refused to change device tx_queue_len 05:32:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:32:59 executing program 0: 05:32:59 executing program 4: 05:32:59 executing program 3: 05:32:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014", 0x1d, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:59 executing program 3: 05:32:59 executing program 0: 05:32:59 executing program 4: 05:32:59 executing program 0: 05:32:59 executing program 3: [ 287.442403] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:32:59 executing program 4: [ 287.504982] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 287.512246] gretap0: refused to change device tx_queue_len [ 287.545015] EXT4-fs (loop2): failed to parse options in superblock: X [ 287.565859] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 287.581602] System zones: 0-7 [ 287.603222] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:32:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:32:59 executing program 0: 05:32:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014", 0x1d, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:59 executing program 3: 05:32:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:59 executing program 4: [ 287.623806] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:32:59 executing program 0: 05:32:59 executing program 4: [ 287.717057] gretap0: refused to change device tx_queue_len 05:32:59 executing program 3: 05:32:59 executing program 0: [ 287.763853] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 287.765389] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 287.788840] EXT4-fs (loop2): failed to parse options in superblock: X 05:32:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:59 executing program 4: [ 287.822981] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 287.860109] System zones: 0-7 [ 287.882048] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:32:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:32:59 executing program 3: 05:32:59 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400", 0x2b, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:32:59 executing program 0: 05:32:59 executing program 4: [ 287.926338] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue [ 287.960617] gretap0: refused to change device tx_queue_len 05:32:59 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:32:59 executing program 0: 05:32:59 executing program 4: 05:32:59 executing program 3: [ 288.074611] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:00 executing program 3: 05:33:00 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400", 0x2b, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:00 executing program 4: [ 288.156586] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 288.174017] EXT4-fs (loop2): failed to parse options in superblock: X [ 288.219120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 288.227068] System zones: 0-7 [ 288.254896] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 288.300006] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:33:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:33:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:00 executing program 0: 05:33:00 executing program 3: 05:33:00 executing program 4: [ 288.357562] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:00 executing program 4: 05:33:00 executing program 3: 05:33:00 executing program 0: 05:33:00 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400", 0x2b, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:00 executing program 0: 05:33:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 288.498645] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 288.514819] EXT4-fs (loop2): failed to parse options in superblock: X [ 288.531176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] 05:33:00 executing program 4: [ 288.547528] System zones: 0-7 [ 288.595740] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 288.647736] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue [ 288.677586] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:00 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x8917, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@broadcast}) 05:33:00 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x0, 0x0) 05:33:00 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:33:00 executing program 0: perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbeb7, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) statfs(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x10000) 05:33:00 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000", 0x32, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:00 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:00 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x121041) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x48, 0x2}, @cond}) write$evdev(r0, &(0x7f0000000040), 0x5c0) [ 288.797360] autofs4:pid:12081:autofs_fill_super: called with bogus options 05:33:00 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9404000030000100000000000000000000000000800401007c0401000b000100706f6c6963650000500402803c00010003"], 0x494}}, 0x0) [ 288.885267] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 288.906789] audit: type=1804 audit(1601789580.734:17): pid=12079 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir882718407/syzkaller.bnDxUx/222/file0" dev="sda1" ino=16111 res=1 [ 288.925907] EXT4-fs (loop2): failed to parse options in superblock: X [ 288.964712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 288.976721] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.999832] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:00 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_bond\x00'}) 05:33:00 executing program 0: perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xbeb7, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) statfs(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, 0x0, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x10000) [ 289.016993] System zones: 0-7 [ 289.022993] netlink: 1040 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.039063] audit: type=1804 audit(1601789580.784:18): pid=12079 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir882718407/syzkaller.bnDxUx/222/file0" dev="sda1" ino=16111 res=1 05:33:00 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000", 0x32, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 289.076753] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard [ 289.091359] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:33:00 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24}, {0x6}]}) 05:33:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 05:33:01 executing program 3: r0 = socket(0x1, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) [ 289.297529] audit: type=1804 audit(1601789581.124:19): pid=12118 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir882718407/syzkaller.bnDxUx/223/file0" dev="sda1" ino=16067 res=1 05:33:01 executing program 3: r0 = eventfd2(0xffff, 0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) 05:33:01 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000002080)='/dev/vcsa\x00', 0x81, 0x0) read$FUSE(r0, 0x0, 0x0) [ 289.358706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 289.376514] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 289.401990] audit: type=1804 audit(1601789581.164:20): pid=12118 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir882718407/syzkaller.bnDxUx/223/file0" dev="sda1" ino=16067 res=1 05:33:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:01 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000", 0x32, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 289.451177] EXT4-fs (loop2): failed to parse options in superblock: X [ 289.455726] audit: type=1326 audit(1601789581.184:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12122 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x0 05:33:01 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000440)) 05:33:01 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x689, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x8000000) [ 289.504092] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800c018, mo2=0002] [ 289.525306] System zones: 0-7 [ 289.534806] EXT4-fs (loop2): mounting with "discard" option, but the device does not support discard 05:33:01 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 289.552425] EXT4-fs (loop2): mounted filesystem without journal. Opts: X; ,errors=continue 05:33:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 289.728649] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 05:33:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:01 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x20}]}) 05:33:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {0x2}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 05:33:01 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:01 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c000000100005026669", 0x36, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 290.013390] audit: type=1326 audit(1601789581.844:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12122 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x0 05:33:02 executing program 3: r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xb0000010}) 05:33:02 executing program 4: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002080)={0x50, 0xffffffffffffffda, r1}, 0x50) 05:33:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 290.158636] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_exit\x00', r0}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) creat(&(0x7f0000000300)='./bus\x00', 0x0) 05:33:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c000000100005026669", 0x36, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:02 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) 05:33:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @local}, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @dev={0xfe, 0x80, [0x8, 0x2, 0x3, 0x3, 0x0, 0x4, 0x7, 0xc, 0x2, 0xb, 0x3, 0x8, 0x6]}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x18) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0) setgroups(0x1, &(0x7f00000000c0)=[0x0]) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 05:33:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:02 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0xc0189436, &(0x7f0000000440)) 05:33:02 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) [ 290.471281] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c000000100005026669", 0x36, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:02 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:02 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:02 executing program 4: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x541b, &(0x7f0000000440)) 05:33:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:02 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8904, &(0x7f0000000440)) [ 290.758497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:02 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65", 0x38, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 291.046242] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 05:33:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:03 executing program 0: syz_emit_ethernet(0xd2, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff04000000000086dd600489f1009c8800fe800000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 05:33:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:03 executing program 4: socket(0x10, 0x3, 0x6) 05:33:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65", 0x38, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:03 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x3, 0x2, 0x0) 05:33:03 executing program 4: setresuid(0xee01, 0xee00, 0xffffffffffffffff) r0 = geteuid() setresuid(r0, 0x0, 0xffffffffffffffff) 05:33:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9662ce3ae356538dda120000010000801b10fb54a8cb72d28d82de5ac54e32ad558c46fff4208d49631979a42d6884ec11ce14138b8fe903ddc702e404e19a5183d769676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0000000d604000000000000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd09abbc4fa13aee48ca9a8969faebf3183fe803abbf5024b52dc265b36fc9dae00a0d0956d2d2bd8b6464ef3c6a7352ce743905fd6def8bad3ca6e3abdb2dfc61696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf7257d327070e42410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a8a0b36754ed5290a8cd8470e776d6b80630d6cbde49b29a6cb5f4fc0001000000004b588c745c380e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c6310386597760525b595fe1f697bc114cd1778e97a3f0295f946974cdb458be2a34cf924dc36b558fbf17a76f3547497aba5086e30ec8a57c814382ffab045ca077a9d15251875432e74b54afaf4985672a1c7b3c200021de95ae7b3e094a68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d62b1e6ffcaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e0fbc70bcb975f97ed7b03000000000000003f20572768a09224ed1c28b5df794ba9e54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c75ac63f04af77c9721459abfcfa1e9773b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe986801fbf3983f283f2faf8f40e39927aca9ec527fb5b6bf7e7b0374814d63c93c912dd0c6908149cb79c54b0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9d99d17c02a97b5230487782ca00edf8e47a71bcc738ef636d32b01933556f9afe772cd45af0a401f694d0c68e9be62693f017e58686c809f4603a2acaca0a4993736a718c7fa2ebdf178c70f3cfec34d5968085f825f"], &(0x7f0000000040)='GPL\x00', 0x1, 0x985, &(0x7f0000002180)=""/4112, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r2) 05:33:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:03 executing program 0: r0 = openat$vcsa(0xffffff9c, &(0x7f0000000700)='/dev/vcsa\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000002300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) read$char_raw(r0, &(0x7f0000002400)={""/38019}, 0x9600) [ 291.535634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:03 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x80108906, 0x0) 05:33:03 executing program 4: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x543, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 05:33:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65", 0x38, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 291.601811] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:03 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback}}) 05:33:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:03 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x4788, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 05:33:03 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0) 05:33:03 executing program 4: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x2, &(0x7f0000000040)) [ 291.774863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 291.796694] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 291.874679] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)) 05:33:03 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x200001b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:03 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 291.915993] EXT4-fs (loop2): failed to parse options in superblock: X [ 291.935523] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (8 blocks) 05:33:03 executing program 3: perf_event_open(&(0x7f0000000140)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:03 executing program 0: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002340)=""/4072, 0xfe8}], 0x1, 0x0, 0x0, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x1c030011, 0x0, 0x1c030011, 0x64, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x258, {0x900000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000180)) [ 292.056304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 292.070301] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:03 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', 0x0, 0x0) 05:33:03 executing program 3: r0 = socket(0x11, 0x3, 0x0) bind$vsock_stream(r0, 0x0, 0x0) 05:33:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 292.142834] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 292.173083] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:04 executing program 4: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:04 executing program 3: [ 292.227808] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (8 blocks) [ 292.284056] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 292.287931] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:04 executing program 3: r0 = openat$cuse(0xffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 292.359756] audit: type=1400 audit(1601789584.194:23): avc: denied { module_load } for pid=12503 comm="syz-executor.4" path="/eth0" dev="mqueue" ino=31948 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 05:33:04 executing program 4: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 292.563780] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 292.577849] EXT4-fs (loop2): failed to parse options in superblock: X [ 292.597343] EXT4-fs (loop2): bad geometry: block count 64 exceeds size of device (8 blocks) [ 292.632700] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 292.657456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:04 executing program 0: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8940, &(0x7f0000000440)) 05:33:04 executing program 4: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:04 executing program 3: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x7, 0xffffdd86}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 05:33:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:04 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:04 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x40) [ 293.064349] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 293.092651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:04 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:04 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0xfffffffffffffffe, &(0x7f0000000080)) 05:33:04 executing program 4: r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:05 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 293.111762] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:05 executing program 4: finit_module(0xffffffffffffffff, 0x0, 0x0) 05:33:05 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xe1951c00}]}) 05:33:05 executing program 0: r0 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 05:33:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 293.273450] audit: type=1326 audit(1601789585.104:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12592 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0xe1950000 05:33:05 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) [ 293.355298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 293.379396] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:05 executing program 4: finit_module(0xffffffffffffffff, 0x0, 0x0) 05:33:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:05 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:05 executing program 0: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180), 0xc, 0x0}, 0x4000840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0), 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 05:33:05 executing program 4: finit_module(0xffffffffffffffff, 0x0, 0x0) 05:33:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:05 executing program 0: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180), 0xc, 0x0}, 0x4000840) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x68200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0), 0x0) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) [ 293.644022] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 293.664475] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 293.676583] EXT4-fs (loop2): failed to parse options in superblock: X [ 293.689601] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 293.706663] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 293.735790] EXT4-fs (loop2): get root inode failed [ 293.746441] EXT4-fs (loop2): mount failed 05:33:05 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4040aeee, &(0x7f00000000c0)) 05:33:05 executing program 4: r0 = mq_open(0x0, 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:05 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:05 executing program 0: r0 = socket(0x11, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x689, 0x7}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0) 05:33:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 294.049496] audit: type=1326 audit(1601789585.884:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12592 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0xe1950000 05:33:06 executing program 4: r0 = mq_open(0x0, 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 294.182726] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 294.197197] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:06 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000400)='./file0\x00', 0xb) 05:33:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 294.222894] EXT4-fs (loop2): failed to parse options in superblock: X [ 294.252893] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:06 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000440)) [ 294.288914] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:06 executing program 4: r0 = mq_open(0x0, 0x0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 05:33:06 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 294.341888] EXT4-fs (loop2): get root inode failed [ 294.356767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 294.378077] EXT4-fs (loop2): mount failed 05:33:06 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x0, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0x279, &(0x7f00000000c0)={0x0}}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) recvmsg(r3, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x80000}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) 05:33:06 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, r1, 0xc9647caf603edff5, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{}, {}, 0x8, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x20000000000000d8) ioctl$TIOCSCTTY(r4, 0x540e, 0x539) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005300)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000053c0)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005380)={&(0x7f0000000540)={0xe6, r7, 0x300, 0x70bd27, 0x25dfdb7c, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff0c97}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x46}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x739}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x200}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3c69000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8d65}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x70d7}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c004}, 0x1) 05:33:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:06 executing program 4: mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 05:33:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:06 executing program 4: mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 294.537727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 294.555062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 294.579185] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:06 executing program 4: mq_open(&(0x7f0000001380)='eth0\x00', 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 294.580399] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 294.595133] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:06 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 05:33:06 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 294.636614] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 294.656794] EXT4-fs (loop2): get root inode failed [ 294.665971] EXT4-fs (loop2): mount failed 05:33:06 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {0x0, 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:06 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:06 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) [ 294.791937] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 294.838654] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 294.855419] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 294.863427] EXT4-fs (loop2): failed to parse options in superblock: X [ 294.867717] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 294.905320] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 294.944375] audit: type=1326 audit(1601789586.774:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x7fc00000 [ 294.983617] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 294.997204] EXT4-fs (loop2): get root inode failed [ 295.002762] EXT4-fs (loop2): mount failed [ 295.128103] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 05:33:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x0, 0x80002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0x279, &(0x7f00000000c0)={0x0}}, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) recvmsg(r3, &(0x7f0000002380)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x80000}}}, 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) [ 295.268210] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 05:33:07 executing program 3: setresuid(0xee00, 0xee01, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 05:33:07 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100), 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) 05:33:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)={0x14, 0xe, 0x6, 0x201}, 0x14}}, 0x0) [ 295.452853] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 295.470549] gretap0: refused to change device tx_queue_len [ 295.483365] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:07 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$alg(r0, 0x0, 0x0) [ 295.506532] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 295.522405] net_ratelimit: 5 callbacks suppressed [ 295.522415] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.534055] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a00000079a782d2250000020006e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@auto_da_alloc_val={'auto_da_alloc'}}]}) [ 295.578777] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:07 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100), 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 295.625213] EXT4-fs (loop2): get root inode failed 05:33:07 executing program 0: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) [ 295.653268] EXT4-fs (loop2): mount failed 05:33:07 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000600)='net/vlan/config\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000000640)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3b}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 05:33:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:07 executing program 0: socket(0x11, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0) 05:33:07 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 295.710321] audit: type=1326 audit(1601789587.544:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12785 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x7fc00000 [ 295.747128] EXT4-fs (loop3): Can't read superblock on 2nd try 05:33:07 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffd88) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getpriority(0x1, 0x0) [ 295.821040] gretap0: refused to change device tx_queue_len [ 295.827121] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:33:07 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x10, 0x0) [ 295.884123] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 295.898864] EXT4-fs (loop3): Can't read superblock on 2nd try 05:33:07 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100), 0x0, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:07 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:07 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x1, 0x0) 05:33:07 executing program 3: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5460, &(0x7f0000000440)) [ 295.981906] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 296.009249] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:07 executing program 0: modify_ldt$write(0x1, &(0x7f0000000000)={0xf86}, 0x10) [ 296.045849] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 296.051812] audit: type=1800 audit(1601789587.874:28): pid=12887 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16167 res=0 [ 296.077756] EXT4-fs (loop2): get root inode failed [ 296.082702] EXT4-fs (loop2): mount failed [ 296.111211] gretap0: refused to change device tx_queue_len [ 296.124092] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 05:33:08 executing program 0: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap='cache=mmap', 0x3b}], [], 0x6b}}) 05:33:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1}, 0x40) 05:33:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600), 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:08 executing program 3: timer_create(0x24c06123cb23699e, 0x0, &(0x7f0000000180)) [ 296.228888] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:08 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 296.287576] 9p: Unknown Cache mode mmap;k [ 296.306360] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:08 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[], 0x2) 05:33:08 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) 05:33:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x100000}]}) [ 296.352287] EXT4-fs (loop2): failed to parse options in superblock: X [ 296.376230] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 296.388193] EXT4-fs (loop2): get root inode failed [ 296.393579] EXT4-fs (loop2): mount failed 05:33:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600), 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 296.422209] audit: type=1326 audit(1601789588.254:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12940 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x100000 [ 296.444466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000002c0)={0xf}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000200)={[{0x0, 0x0, 0x7f}]}) 05:33:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) clone(0x4080, &(0x7f0000000440), 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:33:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 296.531510] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 296.560024] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:08 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 296.630661] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 296.639822] EXT4-fs (loop2): failed to parse options in superblock: X [ 296.671180] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 296.680743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 296.684583] EXT4-fs (loop2): get root inode failed [ 296.697009] EXT4-fs (loop2): mount failed 05:33:08 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() capget(&(0x7f0000000100)={0x20080522, r0}, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x3}) 05:33:08 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa8, 0x2, {{0x1, 0x16, 0x5, 0x32, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x0, 0x0, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc325, 0x7f800, 0x40, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x43, 0x2, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5ff, 0x6, 0x7fffffff, 0x4}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa7f22c38e349112}]}}}]}, 0xd8}}, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 05:33:08 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600), 0x0, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:08 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 296.865751] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue 05:33:08 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x6) 05:33:08 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 296.966793] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 297.005490] audit: type=1800 audit(1601789588.834:30): pid=13021 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16177 res=0 [ 297.007997] EXT4-fs (loop2): failed to parse options in superblock: X [ 297.044609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 297.122539] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 297.149999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.156620] EXT4-fs (loop2): get root inode failed [ 297.173968] EXT4-fs (loop2): mount failed [ 297.190883] audit: type=1326 audit(1601789589.024:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12940 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x460cea code=0x100000 05:33:09 executing program 0: migrate_pages(0x0, 0x8, &(0x7f0000000100)=0xfffffffffffffffe, &(0x7f0000000140)=0x1) 05:33:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa8, 0x2, {{0x1, 0x16, 0x5, 0x32, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x0, 0x0, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc325, 0x7f800, 0x40, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x43, 0x2, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5ff, 0x6, 0x7fffffff, 0x4}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa7f22c38e349112}]}}}]}, 0xd8}}, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 05:33:09 executing program 3: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xaf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{}, {}, 0x0, {0x2, 0x0, @broadcast}, 'veth0_to_bond\x00'}) 05:33:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f465", 0xf, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 297.339165] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 297.375234] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:09 executing program 3: mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x20800000, 0x3) [ 297.406517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 297.410760] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 297.488996] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.490619] EXT4-fs (loop2): get root inode failed [ 297.507438] audit: type=1800 audit(1601789589.314:32): pid=13067 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16186 res=0 05:33:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}}, 0x0) 05:33:09 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) [ 297.529791] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 297.565841] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:33:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa8, 0x2, {{0x1, 0x16, 0x5, 0x32, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x0, 0x0, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc325, 0x7f800, 0x40, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x43, 0x2, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5ff, 0x6, 0x7fffffff, 0x4}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa7f22c38e349112}]}}}]}, 0xd8}}, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) 05:33:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x1, 0x985, &(0x7f0000002180)=""/4112, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) [ 297.615196] EXT4-fs (loop2): mount failed 05:33:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x14, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 05:33:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f465", 0xf, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 297.696925] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:33:09 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 297.865248] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 297.888872] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 297.905693] audit: type=1800 audit(1601789589.734:33): pid=13112 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16187 res=0 [ 297.911813] EXT4-fs (loop2): failed to parse options in superblock: X [ 297.932167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13140 comm=syz-executor.3 05:33:09 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000", 0x1f, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 297.971110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13140 comm=syz-executor.3 05:33:09 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) recvmsg(r0, 0x0, 0x0) [ 298.026224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 298.053724] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:09 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa8, 0x2, {{0x1, 0x16, 0x5, 0x32, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x0, 0x0, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc325, 0x7f800, 0x40, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x43, 0x2, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5ff, 0x6, 0x7fffffff, 0x4}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa7f22c38e349112}]}}}]}, 0xd8}}, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 298.071834] EXT4-fs (loop2): get root inode failed 05:33:09 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x14, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 298.137038] EXT4-fs (loop2): mount failed 05:33:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 298.160434] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 05:33:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f465", 0xf, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:10 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000100)={0x67446698, 0x0, 0x0, 0x0, 0x0, "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"}, 0xd01) 05:33:10 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000", 0x24, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 298.462545] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 298.474399] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 298.491841] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x3, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) [ 298.508328] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 298.511954] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:10 executing program 3: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x40400) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180), 0xc, 0x0}, 0x4000840) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 05:33:10 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 298.566982] audit: type=1800 audit(1601789590.394:34): pid=13170 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16194 res=0 [ 298.601389] EXT4-fs (loop2): get root inode failed [ 298.637683] EXT4-fs (loop2): mount failed 05:33:10 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xd8, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa, 0x1, 'netem\x00'}, {0xa8, 0x2, {{0x1, 0x16, 0x5, 0x32, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x3f}, @TCA_NETEM_DELAY_DIST={0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x20000, 0x25, 0x0, 0x0, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0xc325, 0x7f800, 0x40, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x43, 0x2, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x8001, 0x9f, 0x2}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5ff, 0x6, 0x7fffffff, 0x4}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xa7f22c38e349112}]}}}]}, 0xd8}}, 0x0) [ 298.662520] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 05:33:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000", 0x16, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:10 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000", 0x24, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 298.773156] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.833704] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 298.856597] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 298.925868] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 298.970262] EXT4-fs (loop2): get root inode failed [ 298.991835] EXT4-fs (loop2): mount failed 05:33:10 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 299.228937] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 299.264749] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:33:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) 05:33:11 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000", 0x24, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 299.277309] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 299.287320] syz-executor.3 (13211) used greatest stack depth: 22912 bytes left 05:33:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000", 0x16, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:11 executing program 3: sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x40400) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180), 0xc, 0x0}, 0x4000840) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x0, 0x2], 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, @loopback, [], "050c68deb1caadea"}}}}}}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 05:33:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) socket(0x10, 0x3, 0x0) [ 299.434027] kauditd_printk_skb: 1 callbacks suppressed [ 299.434058] audit: type=1800 audit(1601789591.264:36): pid=13268 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16190 res=0 [ 299.488040] nla_parse: 1 callbacks suppressed [ 299.488051] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 299.511551] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 299.528971] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:11 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 299.589435] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 299.590733] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 299.648185] EXT4-fs (loop2): get root inode failed [ 299.670728] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 299.689280] EXT4-fs (loop2): mount failed [ 299.699659] audit: type=1800 audit(1601789591.534:37): pid=13292 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16133 res=0 [ 299.725483] ================================================================================ [ 299.734283] UBSAN: Undefined behaviour in arch/x86/kernel/uprobes.c:276:56 [ 299.741299] index 4 is out of range for type 'insn_byte_t [4]' [ 299.747280] CPU: 1 PID: 13305 Comm: syz-executor.0 Not tainted 4.19.149-syzkaller #0 [ 299.755264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.765343] Call Trace: [ 299.768029] dump_stack+0x22c/0x33e [ 299.771696] ubsan_epilogue+0xe/0x3a [ 299.775398] __ubsan_handle_out_of_bounds.cold+0x63/0x6f [ 299.780879] arch_uprobe_analyze_insn+0x9d8/0xaa0 [ 299.785715] ? default_abort_op+0x110/0x110 [ 299.790938] ? do_read_cache_page+0xfe/0x11d0 [ 299.795425] ? copy_insn+0x3f3/0x4f0 [ 299.799130] uprobe_mmap+0x8c2/0xa70 [ 299.802851] ? uprobe_apply+0x160/0x160 [ 299.806851] mmap_region+0x552/0x1510 [ 299.810645] ? vm_brk+0x20/0x20 [ 299.813960] ? security_mmap_addr+0x73/0x90 [ 299.818270] ? get_unmapped_area+0x296/0x3b0 [ 299.822667] do_mmap+0x8e8/0x1080 [ 299.826137] vm_mmap_pgoff+0x197/0x200 [ 299.830018] ? vma_is_stack_for_current+0xc0/0xc0 [ 299.834858] ? copy_fd_bitmaps+0x2c0/0x2c0 [ 299.839101] ? put_timespec64+0xcb/0x120 [ 299.843147] ? jiffies_to_timeval+0xb0/0xb0 [ 299.847461] ksys_mmap_pgoff+0x2d1/0x660 [ 299.851514] ? find_mergeable_anon_vma+0x260/0x260 [ 299.856453] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 299.861823] ? trace_hardirqs_off_caller+0x6e/0x210 [ 299.866866] ? do_syscall_64+0x21/0x670 [ 299.870833] do_syscall_64+0xf9/0x670 [ 299.874643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.879816] RIP: 0033:0x45de89 [ 299.882996] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.901979] RSP: 002b:00007fbf6b118c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 299.909671] RAX: ffffffffffffffda RBX: 0000000000021400 RCX: 000000000045de89 [ 299.916925] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020007000 05:33:11 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 299.924182] RBP: 000000000118bf78 R08: 0000000000000003 R09: 0000000000000000 [ 299.931437] R10: 0000000000000412 R11: 0000000000000246 R12: 000000000118bf2c [ 299.938695] R13: 00007fffa2e7240f R14: 00007fbf6b1199c0 R15: 000000000118bf2c [ 299.945958] ================================================================================ 05:33:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000", 0x16, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:11 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r5 = socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) [ 300.008824] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:33:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timerfd_create(0x8, 0x0) 05:33:11 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000030000", 0x27, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 300.110028] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 300.139965] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 300.165198] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)) [ 300.206063] audit: type=1800 audit(1601789592.024:38): pid=13315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16198 res=0 [ 300.212107] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x11, 0x0, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000340), &(0x7f0000000380)=0x10) 05:33:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:12 executing program 3: r0 = socket(0x1, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xf0ff7f) [ 300.345463] EXT4-fs (loop2): get root inode failed [ 300.351980] EXT4-fs (loop2): mount failed [ 300.370156] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 300.383646] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 [ 300.440105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000", 0x1a, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:12 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000030000", 0x27, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 300.586080] audit: type=1800 audit(1601789592.415:39): pid=13351 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16139 res=0 05:33:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:12 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) open(0x0, 0x104, 0x31) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0xfb, 0x0, 0x0, 0x1, 0x400000000000000, 0x0, 0xb59], 0x0, 0x100}) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x1200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x74667706}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x5e22, @local}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, &(0x7f00000001c0)='debugfs\x00', 0x0, &(0x7f0000000340)='[-\x00') 05:33:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) socket(0x11, 0x0, 0x0) [ 300.672806] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 300.681322] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:12 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f00000000000002000200000000000000030000", 0x27, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 300.732130] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 300.771594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 300.780888] EXT4-fs (loop2): get root inode failed [ 300.789792] EXT4-fs (loop2): mount failed 05:33:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 300.859099] audit: type=1800 audit(1601789592.695:40): pid=13392 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16133 res=0 05:33:12 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 05:33:12 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:12 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) 05:33:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000", 0x1a, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:12 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 301.034788] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block 05:33:12 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 301.083763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 301.111285] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 301.136777] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 [ 301.139810] EXT4-fs (loop2): failed to parse options in superblock: X [ 301.165220] audit: type=1800 audit(1601789592.995:41): pid=13428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16140 res=0 05:33:13 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000", 0x28, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0xd0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x600007fe, &(0x7f00000000c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffe98) 05:33:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) 05:33:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 301.249144] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated [ 301.261793] EXT4-fs (loop2): get root inode failed [ 301.268406] EXT4-fs (loop2): mount failed 05:33:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000", 0x1a, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 301.403829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 301.418686] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 301.438171] audit: type=1800 audit(1601789593.265:42): pid=13461 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16133 res=0 [ 301.457613] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 301.475868] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:33:13 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r3, 0x208200) 05:33:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:13 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 301.517810] EXT4-fs (loop2): failed to parse options in superblock: X [ 301.542001] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:13 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000", 0x28, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 301.606421] EXT4-fs (loop2): get root inode failed [ 301.657667] EXT4-fs (loop2): mount failed 05:33:13 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:13 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000000000000400", 0x1c, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 301.704186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 301.785381] audit: type=1800 audit(1601789593.585:43): pid=13487 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16139 res=0 [ 301.827591] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block [ 301.871070] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 [ 301.901017] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 301.908883] EXT4-fs (loop2): failed to parse options in superblock: X [ 301.919779] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 301.931600] EXT4-fs (loop2): mount failed 05:33:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0xe88, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x0, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0xe88}}, 0x0) 05:33:14 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) 05:33:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:14 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000", 0x28, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000000000000400", 0x1c, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 302.209526] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 302.221776] EXT4-fs (loop2): failed to parse options in superblock: X [ 302.233934] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.255581] EXT4-fs (loop2): corrupt root inode, run e2fsck 05:33:14 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) [ 302.279974] audit: type=1800 audit(1601789594.105:44): pid=13532 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16222 res=0 [ 302.314731] EXT4-fs error (device loop1): ext4_empty_dir:2734: inode #12: comm syz-executor.1: Directory hole found for htree leaf block 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) [ 302.328361] EXT4-fs (loop2): mount failed 05:33:14 executing program 3: r0 = socket(0x1, 0x3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8983, &(0x7f0000000440)) 05:33:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:14 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000/0x4000)=nil}) [ 302.378720] EXT4-fs error (device loop1): ext4_free_inode:350: comm syz-executor.1: bit already cleared for inode 12 05:33:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f0000000000000400", 0x1c, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 302.466622] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:14 executing program 0: write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, 0xffffffffffffffff, 0x0) 05:33:14 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 302.522719] audit: type=1800 audit(1601789594.355:45): pid=13564 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16202 res=0 05:33:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:14 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) [ 302.602233] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 302.628842] EXT4-fs (loop2): failed to parse options in superblock: X [ 302.678364] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 302.688381] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 302.713756] EXT4-fs (loop2): mount failed 05:33:14 executing program 0: r0 = open(0x0, 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 302.730468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:14 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:14 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f000018efdc)="1400000052001f0214f9f4070009040081000710", 0x14) 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:14 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 302.906965] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 302.931326] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:14 executing program 3: 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 302.974323] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:14 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:14 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f000000000000040002000000000000000500000025", 0x29, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:14 executing program 3: [ 303.019829] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 [ 303.042346] EXT4-fs (loop2): get root inode failed [ 303.054653] EXT4-fs (loop2): mount failed 05:33:14 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$inet6(0xa, 0x3, 0xff) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:14 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:15 executing program 3: 05:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:15 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$inet6(0xa, 0x3, 0xff) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 303.260773] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 303.279511] EXT4-fs error (device loop1): ext4_lookup:1593: inode #2: comm syz-executor.1: deleted inode referenced: 12 05:33:15 executing program 3: [ 303.310993] EXT4-fs (loop2): failed to parse options in superblock: X [ 303.346649] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:15 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:15 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$inet6(0xa, 0x3, 0xff) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 303.387364] EXT4-fs (loop2): get root inode failed 05:33:15 executing program 3: 05:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 303.410375] EXT4-fs (loop2): mount failed 05:33:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:15 executing program 3: 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 303.538319] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 05:33:15 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 303.593769] EXT4-fs (loop1): get root inode failed 05:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:15 executing program 3: [ 303.622343] EXT4-fs (loop1): mount failed [ 303.634453] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 303.661527] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:15 executing program 4: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:15 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 303.716671] EXT4-fs error (device loop2): ext4_fill_super:4448: inode #2: comm syz-executor.2: iget: root inode unallocated 05:33:15 executing program 3: 05:33:15 executing program 4: socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 303.775775] EXT4-fs (loop2): get root inode failed [ 303.795887] EXT4-fs (loop2): mount failed 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 303.858698] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 303.879540] EXT4-fs (loop1): get root inode failed [ 303.884614] EXT4-fs (loop1): mount failed 05:33:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:15 executing program 3: 05:33:15 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, 0x0, 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:15 executing program 3: 05:33:15 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 304.065530] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 304.089643] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 304.097536] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:15 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:16 executing program 3: [ 304.166147] EXT4-fs (loop1): get root inode failed [ 304.167587] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 304.200755] EXT4-fs (loop1): mount failed [ 304.213888] EXT4-fs (loop2): group descriptors corrupted! 05:33:16 executing program 3: 05:33:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:16 executing program 3: 05:33:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:16 executing program 3: 05:33:16 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 304.483707] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 304.495527] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 304.514230] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 304.532492] EXT4-fs (loop1): get root inode failed 05:33:16 executing program 3: 05:33:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 304.555643] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 304.574841] EXT4-fs (loop1): mount failed [ 304.591065] EXT4-fs (loop2): group descriptors corrupted! 05:33:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:16 executing program 3: 05:33:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 304.724940] nla_parse: 2 callbacks suppressed [ 304.724951] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:16 executing program 3: 05:33:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 304.806966] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 304.844884] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:16 executing program 3: [ 304.859174] EXT4-fs (loop2): failed to parse options in superblock: X [ 304.870311] EXT4-fs (loop1): get root inode failed [ 304.881888] EXT4-fs (loop1): mount failed [ 304.887375] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 05:33:16 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 304.938702] EXT4-fs (loop2): group descriptors corrupted! 05:33:16 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:16 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:16 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:16 executing program 3: 05:33:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 305.067955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 305.108328] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 305.143817] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:17 executing program 3: 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) [ 305.154663] EXT4-fs (loop1): get root inode failed [ 305.165011] EXT4-fs (loop2): failed to parse options in superblock: X [ 305.180647] EXT4-fs (loop1): mount failed 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 305.214320] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 305.235636] EXT4-fs (loop2): group descriptors corrupted! 05:33:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="000000000000000000000000bdcefad9b4924007bb783623d7c96baa2edc1f430597039cfeffffffe1f4655f00003daec2f5afc5c6ef09000000000000000000000000000000000000e1ec18d4ad034371c7680138891dd9b0a5e3f580c621f4ffc2083e05f51662fe0253b30c513dd1a62d2a0c7db944b84b9b77f53ab1ab5f1ab36045d9b2cd17f0d30de6df15e34581d60606991b8d352956de8c5df1ffb2a67d8d986f83353ba63e5045fb22772301f3e443f70774360cec6881ace456348543a947fc64677efe9398180c159a64eff0c5ced0c09fe9efd65988caec5c5ae096c7429083c9b2aae1043f2c704911c5cbacb3b3e2fb2fc09bd590735bad2913c84d00fca7628fdac0c903fffa1a4933bfe1fc7f25048b227afbad71c59a4e58", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:17 executing program 3: 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 305.372105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 305.396115] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:17 executing program 3: [ 305.426369] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 305.453161] EXT4-fs (loop2): failed to parse options in superblock: X [ 305.486349] EXT4-fs (loop1): get root inode failed [ 305.496793] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 305.520323] EXT4-fs (loop1): mount failed 05:33:17 executing program 3: 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x40, 0x0) 05:33:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 305.533648] EXT4-fs (loop2): group descriptors corrupted! 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {0x0, 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:17 executing program 3: [ 305.690638] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 305.695945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x40, 0x0) [ 305.760354] EXT4-fs (loop1): get root inode failed [ 305.778284] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 305.780242] EXT4-fs (loop1): mount failed [ 305.800690] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:17 executing program 3: 05:33:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00), 0x0, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 305.821661] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x40, 0x0) 05:33:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 305.898067] EXT4-fs (loop2): group descriptors corrupted! 05:33:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:17 executing program 3: 05:33:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x40, 0x0) [ 305.987288] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 05:33:17 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 306.039928] EXT4-fs (loop1): get root inode failed [ 306.052990] EXT4-fs (loop1): mount failed [ 306.066935] EXT4-fs (loop2): Unrecognized mount option "X" or missing value 05:33:17 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:17 executing program 3: [ 306.089148] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:18 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 306.136372] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.162956] EXT4-fs (loop2): group descriptors corrupted! 05:33:18 executing program 3: 05:33:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 306.315135] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated 05:33:18 executing program 4: 05:33:18 executing program 3: [ 306.399619] EXT4-fs (loop1): get root inode failed [ 306.412471] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 306.423105] EXT4-fs (loop1): mount failed 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:18 executing program 3: [ 306.454250] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:18 executing program 4: 05:33:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) 05:33:18 executing program 3: 05:33:18 executing program 4: [ 306.567513] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.607128] EXT4-fs (loop2): group descriptors corrupted! [ 306.651911] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:18 executing program 3: 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:18 executing program 4: [ 306.715467] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 306.737454] EXT4-fs (loop1): get root inode failed [ 306.744570] EXT4-fs (loop1): mount failed 05:33:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) 05:33:18 executing program 4: 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) 05:33:18 executing program 3: 05:33:18 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f00", 0x15, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 306.878311] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 306.917829] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:18 executing program 4: 05:33:18 executing program 3: 05:33:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB='.'], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 306.954570] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 306.963093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 306.981960] EXT4-fs (loop2): group descriptors corrupted! 05:33:18 executing program 3: 05:33:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000440)="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", 0x121, 0x4e0}, {&(0x7f0000010200)='\x00'/20, 0x14, 0x540}, {&(0x7f0000010400)="0200000003", 0x5, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000013a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 05:33:18 executing program 4: 05:33:18 executing program 5: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) [ 307.086289] EXT4-fs error (device loop1): ext4_fill_super:4448: inode #2: comm syz-executor.1: iget: root inode unallocated [ 307.125668] EXT4-fs (loop1): get root inode failed [ 307.144780] EXT4-fs (loop1): mount failed 05:33:19 executing program 3: 05:33:19 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, 0x0, 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 307.171528] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 05:33:19 executing program 4: [ 307.215529] EXT4-fs (loop2): Unrecognized mount option "X" or missing value [ 307.243901] EXT4-fs (loop2): failed to parse options in superblock: X 05:33:19 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000bf0000000f00000001000000000000000000000000200000002000002000000029c4645f29c4645f0100ffff53ef01000100000029c4645f000000000000000001000000000000000b0000000004", 0x5a, 0x400}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {&(0x7f0000010d00)="ed4100000004000029c4645f29c4645f29c4645f0000000000000400020000", 0x1f, 0x1800}, {&(0x7f0000011100)="ed4100000004000029c4645f29c4645f29c4645f0000000000000200020000000000000003000000ff", 0x29, 0x4000}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c6530", 0x39, 0x9400}, {0x0, 0x0, 0x3fc00}], 0x0, &(0x7f0000000140)=ANY=[]) prctl$PR_SET_PTRACER(0x59616d61, 0x0) unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x200) [ 307.259177] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 307.271296] EXT4-fs (loop2): group descriptors corrupted! 05:33:19 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x