@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001b80)=[{{&(0x7f0000001b00)=@phonet, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/101, 0x65}, 0x1f}, {{&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/154, 0x9a}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/69, 0x45}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x6}, 0x7f}, {{&(0x7f0000001800)=@xdp, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/214, 0xd6}, {&(0x7f0000001a80)=""/118, 0x76}], 0x3, &(0x7f0000001f00)=""/71, 0x38}, 0x4}], 0x3, 0x42, &(0x7f0000001c40)={0x0, 0x989680}) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x40128040}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x4c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000894}, 0x4004050) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r7 = socket(0x11, 0x800000003, 0x0) fstat(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r8) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000001dc0)={{{@in6=@remote, @in6=@mcast1, 0x4e24, 0x89fa, 0x4e23, 0x8000, 0xa, 0x80, 0xa0, 0x89, 0x0, r8}, {0x6, 0x3724, 0x7, 0xfffffffffffffffa, 0x8, 0x7f, 0x9, 0x6}, {0xf5, 0x26, 0xfffffffffffffffc, 0x9}, 0x9, 0x6e6bb9, 0x2, 0x1, 0x1}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d3, 0x33}, 0x2, @in6=@mcast1, 0x34ff, 0x0, 0x0, 0x3, 0x3ff, 0x4, 0x7ff}}, 0xe8) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 20:47:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) [ 1351.528033][T12093] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:32 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff8c, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 20:47:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) [ 1351.945030][T12109] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) [ 1352.232103][T12116] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff5, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1352.611846][T12124] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000) 20:47:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 20:47:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff6, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @private=0xa010100}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) [ 1354.185627][T12139] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffe, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 20:47:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) [ 1354.605673][T12158] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xedc000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) [ 1354.948755][T12166] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 20:47:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1355.437064][T12178] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000) 20:47:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 20:47:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 20:47:37 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'batadv_slave_0\x00', {0x1d5fcfd7}, 0xd0bb}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x1d) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @val={0x2, 0x0, 0xd669, 0x6, 0x8, 0xa9a0}, @eth={@random='K\b\x00', @local, @void, {@llc={0x4, {@snap={0x0, 0x1, "8660", '\x00|F', 0xf9, "4ec09c274963ce1384f700e29daedccc26467f4be15ecaa714bbbdb52d1b3a30fbda25da3fd6e3d8baf1519290bfcec133a5d53f8dfa490e71411b119b5d672ed74b0d0711ec14e8cdcf256ced31890d360e121913522f5eb77581f982637f43c9ce8e91d4262e3463ac525b394dd193274cfc1175c6"}}}}}}, 0x9b) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 1355.991506][T12188] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xe000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) [ 1356.451159][T12208] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 20:47:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) [ 1356.835688][T12217] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:38 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x200000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) [ 1357.245874][T12225] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x2000000) 20:47:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31]}, 0x40) 20:47:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:47:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'ip6gretap0\x00', {0x7, 0x0, @broadcast}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRES16=r5, @ANYRES16=r6], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1358.384839][T12238] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 20:47:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) [ 1358.870019][T12259] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 20:47:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x500000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) [ 1359.270278][T12269] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 20:47:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x5000000) 20:47:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x600000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 20:47:41 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x100}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1360.278274][T12286] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 20:47:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 20:47:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) [ 1360.764221][T12311] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 20:47:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:42 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) [ 1361.085792][T12322] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:42 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x900000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1361.456107][T12328] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000) 20:47:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 20:47:43 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xa00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:43 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa08004500001c00000400000290780000000000000000000090780001"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'user.', '\\\x00'}, &(0x7f00000001c0)='%(\x00', 0x3, 0x1) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x100, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x8000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'xfrm0\x00', 0x400}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1362.323803][T12340] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:43 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xc00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) [ 1362.751583][T12360] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 20:47:44 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xd00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 20:47:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) [ 1363.330899][T12373] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 20:47:44 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1363.829247][T12381] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:45 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:45 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 20:47:45 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000440)={0x9d0000, 0x5, 0x400, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x990a5e, 0x3, [], @p_u16=&(0x7f00000003c0)=0x7f}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="05000000000000000000010000000000000008410000004c001800000000696200"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x30, r3, 0x14, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xffe, 0x46851006, 0xe0f7, 0x7}}}, ["", "", "", ""]}, 0x30}}, 0x10000) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xa) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x7, 0xa0363159, 0x1, @stepwise={0x2, 0x7fffffff, 0x6, 0xfffff800, 0x4d, 0x9}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000200)=0x17, 0x4) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0)={0x248, r8, 0x40a, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x174, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f82c810}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d78d66e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17a48da4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b5eca87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30398f65}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55c928d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cb12389}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x373d86ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f65c31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a3e5961}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x266250e1}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7fff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b2c4c7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bdf0bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x748b3ae0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57fe3ac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x433f6bef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a6c37a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44796598}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd31f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x232cf9bc}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599754fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306edefa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6862f9c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3981d21e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e7c0d76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d2fc849}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fb4f7de}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e6e0f09}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4dd97662}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000010) [ 1364.495590][T12395] __nla_validate_parse: 1 callbacks suppressed [ 1364.495602][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1364.499635][T12396] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1364.533010][T12398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x7000000) 20:47:45 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@local}, {0x0, 0x0, 0x8e56}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) syz_mount_image$msdos(&(0x7f0000000400)='msdos\x00', &(0x7f0000000440)='./file0\x00', 0x7ff, 0x4, &(0x7f0000000740)=[{&(0x7f0000000480)="1b2dfef2da0df7418d6a547d0e4defd153386bdb799bacd808531b9dce9d556782e366f8200d0a3d89530e069e37fbcbccbd33eec729e773e0d517bfa9b2178ed65fbbdc7f001185ba4ac56cbef908a45285c8630d24dfe54307ce2c33bded697f056d37abfeba30d8f1396454947717a3fc2f4464491676e3e03347644f29961b217acec8414e583d210688cfeaac9553743cb19a863a4a60d7eb5ba1631fc2ee6baaa31c5bc67ae476ff579c91379fcade32d2be13abe7ed78d90959ffd1e5bd9c3f1a939eab43e156e38d5a11dcdc40d759fb46b7f24774", 0xd9, 0x9}, {&(0x7f0000000600)="211c077aafd24d77fbb4abf93846a8f562a6b1ddbb781c747e11696b9d6d0cf3d652373561e46f7c3812b54b2356f6c96ef0776d524b7ce3e2d42f2e3cc78bf43875de89999fd4fe6f0527dfe29f27746777ce14f4b87f1c6f0deb8990835b2d7926aee9744172a109a8d0c33661f3cf858acac1335c54fc09622edc8971fa0c3ed024d4cc10b75e11e823ca45db4657c5d1d453ab49", 0x96, 0x100}, {&(0x7f00000006c0)="aba286d441955cbc4b97bf63d0fbe5c33e0896a54ddddc643a58b4ad1c1bb95b51af3c4ae98c2e83693bc830861251021309abaa395db603c92ab8f892196517dca3d325288e7a695a394d9ea5e7c3", 0x4f, 0x27}, {&(0x7f0000000580)="f1fdc6ef5f19f35027b2224874474e2669f9028d3064bb9b1fd8", 0x1a, 0x9}], 0x140044, &(0x7f00000007c0)=ANY=[@ANYBLOB='nodots,nocase,discard,contexm=user_u$2']) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) chown(&(0x7f0000000200)='./file0\x00', r1, r3) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x3ff, 0xf7ff6d9b, 0x200000, 0x415, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r6}) 20:47:45 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 20:47:45 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @local}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:47:45 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1e00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) [ 1364.951776][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1365.030011][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 20:47:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000004060362974966548f87a5025c04623ecf54acb6158ed966c92862c5269484928b37a84f2d729f15fff699f001a2a10e565e4a52e346b4e6129650730c8eccc70b1b277a36b351b0542277595b3de3ad72079cfd7c71097f015f20fb080307"], 0x1c}}, 0x0) [ 1365.136944][T12423] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1365.211511][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) read$fb(r1, &(0x7f0000000100)=""/224, 0xe0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 20:47:46 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:46 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000100)={0x1, 'tunl0\x00', {}, 0xffff}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) 20:47:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) dup3(r1, r4, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'hsr0\x00', {0x7, 0x4e24, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 20:47:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) recvmmsg(r1, &(0x7f0000004e00)=[{{&(0x7f0000003640)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003880)=[{&(0x7f00000036c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f00000037c0)=""/20, 0x14}, {&(0x7f0000003800)=""/11, 0xb}, {&(0x7f0000003840)=""/58, 0x3a}], 0x5, &(0x7f0000003900)=""/187, 0xbb}, 0x27c6}, {{&(0x7f00000039c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/221, 0xdd}], 0x1, &(0x7f0000003b80)=""/105, 0x69}, 0x401}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003c00)=""/49, 0x31}, {&(0x7f0000003c40)=""/191, 0xbf}, {&(0x7f0000003d00)=""/59, 0x3b}, {&(0x7f0000003d40)=""/97, 0x61}, {&(0x7f0000003dc0)=""/243, 0xf3}], 0x5, &(0x7f0000003f40)=""/182, 0xb6}, 0xfff}, {{&(0x7f0000004000)=@xdp, 0x80, &(0x7f00000041c0)=[{&(0x7f0000004080)=""/85, 0x55}, {&(0x7f0000004100)=""/162, 0xa2}], 0x2, &(0x7f0000004200)=""/114, 0x72}}, {{&(0x7f0000004280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004300)=""/231, 0xe7}, {&(0x7f0000004400)=""/131, 0x83}, {&(0x7f00000044c0)=""/157, 0x9d}, {&(0x7f0000004580)=""/22, 0x16}], 0x4, &(0x7f0000004600)=""/252, 0xfc}, 0x5}, {{&(0x7f0000004700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004780)=""/74, 0x4a}], 0x1, &(0x7f0000004840)=""/97, 0x61}, 0x6}, {{&(0x7f00000048c0)=@qipcrtr, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004940)=""/89, 0x59}], 0x1, &(0x7f0000004a00)=""/150, 0x96}, 0x6}, {{&(0x7f0000004ac0)=@x25, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004b40)=""/192, 0xc0}, {&(0x7f0000004c00)=""/217, 0xd9}, {&(0x7f0000004d00)=""/85, 0x55}], 0x3, &(0x7f0000004dc0)=""/39, 0x27}, 0x462}], 0x8, 0x140, &(0x7f0000005000)) getsockopt$nfc_llcp(r2, 0x118, 0x2, &(0x7f0000005040)=""/4096, 0x1000) syz_mount_image$exfat(&(0x7f0000000080)='exfat\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000009, 0xa, &(0x7f0000003540)=[{&(0x7f0000000540)="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", 0x1000, 0xfff}, {&(0x7f0000001540)="f78c27fe80d5748aac409ea59829e5fa8eb58119c96587dbb118498aed85e5fad6d9652bd9624919aefc4b5e92cf6b1d57356f4dc58ac7795ffc339eec5453d3527c1b20b2c1d1d9edb9aa10beee38ceec0c3611f7d377a83692d62379d1c7ad726981c7cd9a2362cc9d5a2d3fa5bf01392537f4ee763cb5cd442565e60982f77d5b0a895ec695f27df4d9bc38d5c17f8d96e3e9b8bc85b0d2830bf69084738386c366a76599b6ce606e8e6e5534c4bd240e391a14290433cd9f44e2a99a548a787706ead2d099370fa9311ec34afae9460d49d227baa5b4ec453acdf6e0aee9a98a35cc06985df42642bedddf646965cd353fa12fa427d6ec6857e24b5909b7f24d2f9126a9389df2bcecd2823b8f2ddc4cb462ce75a360da1c3c38be7da4504738741cae70def0f218c7b1d80efa58bd2498a7582a2c1eae36860ae874a01fc2e19018a1a5fd3aad3748ba710757c43bff78f153a43130dbc7a054a49a818a0cb272b9eefdfdfbae285c61d25ca42bbd32f2e9293116613e096f46efaeef6618f8cbbf35e3b0fa902d8701ad00b78e5ae12834fda1d7cecd3b3367a6235d9c033bf8fd3e26407822273bc60de011dde3e89dbcdc44a12a37d2ac77d063507ca3491a567267fda1fef4fda3a11f0611a18cb121dccb884dc61e4a4ea0f062e309b92ce611797308923a118304a17d6705e0d6fe6a0afb577a2cb952fa4c72b6cad008e04aefd0566201a7ac9f839e0de270020a405061e1825d6d54e7eb71b2c1a3d0fe05c45f87de3ca10bbeb4df0ab846b6547e83d53c1e5a0f6b8b04ff58b42fb18967061ab1e52a207f3135e87c0b3a61cf1f2247d0b67235169cbcf4b9f7f6dd6f7e7aa3b1054f514d95433f1ab3f1ac016e7016c76036030d791be691b1a32dc9c38f5cefc388231d433a0c8235831623f5a431768457a6e6fee19fa4e3adb47ab018c18a909e15212051341b8a3b09e50a7438374b9acf7159e3048aaeab950f265e0b6fc45a3479152a918f21624a537ba95ceb173ba9cae7c684ec1a23842e7ce754e7145c10c7437aad9ab8cb39ba7df4632cc517eae30710980eec78645dc2d0b161f031fb19c189bbc7ea8f8e2dee8309e57f6734754be46648a837fb7a81463b33b11c947dfd180a34fcbc8c160c4f97864283f18d50f982d5ea662f5fdfb350dbd57b4f36ae49e2dfbd1e957fbfa6a84a550c010ce7891734d514f1531d4eb46d7aef0f28d2898e76f48724b9bc32dd7127a9b02b69d17bfd98580e5b714d6009e028e8dc1c7473a4b5494a86f3f0ad0a264a920c92e359cf63c69bb7c9f2dfdfaecd1218ee55a5daa35c9f071fe2489c5131f3babba1db40cefdf5f8e20770e760a7fba1cefd0fc1bda195bf403cc04a7933a123270590aa88ed217f372ca4ec189e3c57cb9f55dfcd425782d053b5222247c3b7eba116b0d6b1c877e1bd6c855301ddf7c418ed7bf6893441a164fae8339ca9cb7d11055e1105e60094eb2408d97d0ad69451f507d55958d7460a940152fc6a356e60fc13ed29a39e907f5829c15307f62ece6187b6c1659969da0aca088ece498220ffacafc5fedf6f8ffd0b4bfdb9a0908596faa4d71e32a47e3037cbe843f714443b501ac4862a7e1cbabbaec8b56fe048dc33434eac8cdf47897f63f09473e11bcd28d467d2b28d0ea1923547c9c4417b5f6409c596bbda10c39551e4e3afd5e20e9dd181cc1d82c2934eeca27e88fdfbbc8e327bfe6369f9cfd01d64b575bdb58ec065eb6a594e9d2c84d29d51e55e3487c62d9e11172468a32844bf853a386a44398d82bd089a91de46c13869e3081fbda1ece096d2ec19f5b71f227236dbc8a39c278b995ba0add3be436716bef50ea027c05c5861aaf0d63c438348f29d193e102b5a87d4be9bf1a85d63c4aeaf1bfbb4df26e42092f3ab1d41ac360e06c6dc4e001b1e276a1b3cfbfc03a78fd33ee8ea3c3df3ec6379747d7280720485f7ce3e319f52a078dfb1e1535f65410f1e78380da6db937916a3fc3fa0560569621dc69a73ad8c402f225efbb22642bcc3fa8a4669e792583558f79f3653b04d58af3479fb19b30a8e7e3e85600cb63864580225f63b894f5f34bbf89ccee85a79f955e641d670b0ca02aff80540d1e931594409af725e49fba852cf65a9e3c8b803eb8dc955db09034751f557d8738fde45e7962c89ddeae32e2f78b4f22585e3608b9ee1d879da5c01555f1bc44134eb8a613ebd4ada9761f74df2e58b3ec386b82915e2db908e4edcefda7fda1392f2f80b5382dc572874bd14f0211aaf50c5cbd165a79ec5deff78ff1e1ea4fa27f442d3d8355cc08b64036f98a5ce24a0d99cfaef223e87d888814efa7d5607567afea4978a7698aa0de104debe95d3a10b316661b0446b12d140654f469684d3cbead488ff0c17664bfa2aecc9fca963bc70aa4f454956225640a3f458d7e436e453530c972dbd313ac54926c85720fb73b472c7ac20baa5091be284ad0baf3036ac3da393cdb5b73a49669f8c7922edb6592dacdc61ff6ceb8edd999929ea5e271d0db123852febcd999835d906ad569e7c166962490ca07e321ad2f73df020427293069d454272aa2d1eb9149082f6c3abef4ca9169977c3e5caea43caea734b4de6c726f9fff8317721af60ba137ed62c858e108b77e906ba7e4c590422ce0d66b7b2fc7a8bdfd3b7982191557fc3ca906a5e7190fd6e5f2347d7ae64c43341005d564884e878afc4c5d1436ff321958b29fe1f5f35349bb53f67a26c44ee9cc0108d45d1d75fbeef811186559c4bb019eaefa7277732a246f62e9458d0e74ca6ace84331accf97d3b324675d5cdb052384f35e38a69de31c18a88b09673f73acc219a33f99d049065a82dab375114efd46b0511f0ee4da984518c6cf36e5e840a097936eba34c4e22e13ed4a77430e5c9608cad68fbd690b1ef942903e11afa0a20ca4eb996cd4392bb6a0df9769199759d4dd0ef50c75592524fae67ab35007b59fbe0760951f16b430942792a27737dab01c0103033f836c7888d449f1c3bec2b217ee755a173633333f7f89062f9905988b7555e7e02916b4e6d38a6b4d2ccf27a94b275e66ad152c63ed274aeb6a164032d81237559e9f44ac5702e61aa1deacda7788a9f1afa6608251bd0aba6e26b82c0bafd7d8bd0ea0b5817c908e83f21f4b67b3db3612de9cfcb9f9a9844695ce26ca0a3551e5ce307a6eb4d7daa9bb0f6af7e3b37fe8fad63e5faa7371da0d725e0e526b10ae55a0185f8740fb228646bd688659df05840e156f32f2559290e5e0e991117568d687ead1805c9662682e368808c982b232e750628bb2c622684e2d5e91a387b6bdd9c24f10ce16563aeda192c53056dbf9b29e1cd4310c7eb49201be744b23fcb04e597e86babf84e8fd354bedd19cd8b8467e352ae76eda2725fb248ef38d32082b702f9fcb78c2a0a2ddcde8ff14fee32b4469ca4d173d78783d42c3eb44309759f74d607398d2313c3a32d044ae764efffec0d5d813a02fef3752618f6470fc0065a420cb7172202233b7ea838e70dfa0f635444721f8e263af49d612fe7de98d00c1ec3aaae19cde520f43b9f916b711a06e8f496203a7db6e9f2b7f69bf4f9c43824e473382675344356d115b91bfdbf5b5aa3759e6122d6e349b29a0d6331867e5577e98027ad3178cb928e5288c3ee446ad867f1b55c766dc25ebe69b5bbef0b7a2ff5e883b0b8ec72edaa9e239988c38615fcb5c068b0cb077a0c89bf4bf81d402bc72ad154701bcf2392d52109d98d1c29416558db3d3c40957dcbad1fbd6bc47d98810e7cb119590622db8e9a90b0899b862d2967db0d3d95d593a23de12be1c1b55ccdc377f9dd8e301f9602b808aefd8aa72824e3e3d3510c71aeed6d348b19996d65246ddadac79c597a33c7feeab5064770aab98899fcaaca524c67380a09173f01f8cafd6a73cbf14aa4c7a280cd8a5c021cfb665469857995b6469a255a9ea41b08252f6481d2f0f20d1ee008d08b55a3a945ef40d45cf6932755c724538ba4b055e95210fd13c7e7230d2608edbc52ed0a19e21c20a0db35907ac981e872f3a2abfbe4a90a5d3e0719a1d9b2b13d96bfb9a1ae0323f88fe8351f713785d8251a3c3f4930957a54da9092fb4c6584f0392f53092cd68a104d9fa6f182d58f67e84c33bdb8e8c0a0ea1225e626f0dfbf05e142aa2381819eb91acf91bd6af0f9dbf381076042f3952edc1fbe6f02999095fddf5f3e8fce0b147baaa0644af5c936fb79a2c0fd2e980616d0cfe302074bdfb4e6b6ca13aabcec2146c1eba24120519e8788089b4c990d1692f3ecdb7ceec685dce73c1eb6c576da29adb9ba4aad7fd5b0187a9f40fa6995a243e7a68491930e7d4b485ac8d2b0f85760ecbff7ad67c6e4b49779bb6af0928aaa1b967319cafb4a76b330e4f260b72f1be9b38bc620c23b0e2dabb21c5c5f9753ce2808ad715995feac9f964237db41c6be35e9541bf3fd087f28dd148da7907a24ad243947f11f890bda92dd96610ef86335f5acad7a982e9bab2912e42be411c9ead744c45eba061c7742765cc92da0061cd9637fceddb597de1fa52841de45a7aa20c1529cbe88817ccca2e126f95fda362d6ae506199e82d164ef04fdf8c6c9b5a04ea46437ca383ec8cbb7b372a53d7b9e3fbcecef29577cd1c05d71df6a983cabc52dee3eeec6ee3284c592384ab24e8fba756c3e4cd83ed2c89b346162c253c993798710efd7d6ca2d6d8103e9c600e94812d4b4430688f74225e3076858215f7ea132441db757da84a322d5750285f8b4fa7f323fa72869bfe9640f8de31c388f67a32557c292f9bcae6ccc23b59688fa707f80984f56bb4aa7399b9cfd51e33ddcdc1f603bd37eb4ddb051e49f214320762f9289f0938717d61f88d2a6b75ca44f4c866ea36ee5760a3cee79e0b043530069b5499ffea2e05133a3991d116ce0e9805e07da47b315cb8fcf4b0d91e5ff2e0bc19743741235c55f26569a481f36750cf1a27ebbef8bac591d989ae811f0a308dfa2eddd9999961d3a98f70b3af1b14e8ba834170e9f3b5e6bab5e29441c1811835dcae69ca1876f22ce3891adce4a336742c882ef4713810d986e4bf68a80981f16f6a896ad3f64cce3aeacb7b35bbd9190744d4ad2f4671358f6efa95819edcb41244a5bb76020119c0aef7d24d3a144a909c0d6136a24008f639324b32ea89d8eed64e6e163330e6f3222e1c1554942419096c7a80a9ee6f353e2167aa788470002b67d8a5b40ca2cdfd99806616b11f3412fbf60cb61d5a9a4e1b57a400158d2ce3ac2b39e02ea5fd376befff2a6abed24d1c551164a87cf8d0a29ec09b6a4dbbf7ab1d7c2efb9073c1d1ae1c9c0d95808526c756bbafbc3c12276bae1ae1fd5ce52ddb976739dd1f744ee3e67f57f3c7c0b7d9fb66f70ba67c4c0c2cfd0e3a3ea125cb6496c1fce481ca1c588d4c46484b44666d7a4da17d44220209faf126c40b149a8fcb3dfa1fc96063ec95963c6ca795dd428c27a85847cdc74a04ae6e91d561d9854c3c1ab85a2b4d74648dc922f66cf2149986ad3da9a99f28101fe1ce7ec996157cb96d3d32d36ae3a3f987555b7924462771cc4602b7b04a6198c58ca87e8ed9b01f73f14b360b7bcfba5fe67ed4b20bd20c5dcb2d89e8275939ac92baadf98d4daffc8b5ed612d2d75592b75b7f771106a269ff65c712f6f833efb43e02c7c9aa1d785117047f6c81926d0bf3e2f8f8814d448388f4d91016c4ad9fb8f6a4294f49da28b2", 0xffc, 0x2}, {&(0x7f0000000100)="654fd8e923a97ee982d3f1f3b2efbcec359f89ddbc4a5aa532dd8cdfbad28284618a71d502e0bdfc15a7c07e896fa0bc60e0b646fe388a53d81419128303ce6021a5c6a9a1e86b947a8fc41a46412e3f1636b6180bf6e9db32bf31b002be548e6b07f1fd4c9becce8c9a6a788cc1856807c66a3657858d425f854b6afc733a", 0x7f, 0x414}, {&(0x7f0000000180)="9569f2dfc64d1a93f5abb6127ded6c247a9f096156add44be5afe1ece0b7aa5883cca48c394ab40debcd0bc300d6233ca4ca489f1ce49bce65a535bea909fc5caf446905c996aa41ec968c2d82dd668b1d4df920b88271b71953b6737faff7f0f2939972cc", 0x65, 0x4}, {&(0x7f0000000200)="085af0c235f8bf9aaf035a47a9e329440a826c7505adb0e076766ead", 0x1c, 0x20}, {&(0x7f0000000240)="a63e1007002095b2985a7f5b0bf60f8099838ad74eb180f2fe33a7b0fd590aaa2746a551c65b6c1d1cc96d69e7a435d670ff3f5e9a3699ffc43af784cfeaec6d57", 0x41, 0x1ff}, {&(0x7f00000002c0), 0x0, 0x6}, {&(0x7f0000002540)="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", 0x1000, 0x60fe}, {&(0x7f0000000300)="5e7435c350c60ffbea27fe5f1b84621bcc37fe94bd2053f281dac0b27961af96891ba79d594151494684d7e6b55448ae99d213c542cd307eefdfe808003e5cb9985946bc436717ad3ab81a6e5dbf44d1ffaf8837ad15b5361236fa0ec8c8663f69fc5aeea906d63ae2ba73d83561afa122fb63a064f87f059f14b71b8b0fb44d8d93d3cf4df60ef795bfee126776e38c0d497049f739eae9a849dc8063c8e4714f9a1e2ddd15f4ab919df9cc0c689a36a5b0ccb2b42a3ba899174a67baaa3d8507aa3f145439f135", 0xc8, 0x4}, {&(0x7f0000000400)="e2f3a0da9a4ecd883916ec82111fa44893156290145ed1549e597d3ff139f0069a4a1cd7c33736dbff776e627a35864c1c36cd17e4251042c3ad426e6a0c9ecfcc1b6d41f6e071576dc2f6623a29bfd4b481ebcc172f3733364142cd9956a1101302e5b42b18c79f27ea82172f9fdb632e5a7ec59a222bd69771ecf16af3c9711305db663fb93246fd937308ce789116492638f144c56f8929ee2e62805ef24bebb07c0de4029dea13", 0xa9, 0x1}], 0x2280003, &(0x7f0000006040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@codepage={'codepage', 0x3d, 'cp1250'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@errors_continue='errors=continue'}], [{@smackfsdef={'smackfsdef'}}]}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="cec141021fbc7efa0000040604"], 0x1c}}, 0x4800) 20:47:47 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x11fc, 0x13, 0x7, 0x301, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x7}, [@nested={0x127, 0xe, 0x0, 0x1, [@typed={0x4, 0x2b}, @typed={0x8, 0x94, 0x0, 0x0, @fd=r1}, @generic, @typed={0x8, 0x33, 0x0, 0x0, @fd=r2}, @generic="39c0c0e99f21be9058af727d5729479ea37b184b1d65566ddb1c8a2f62cc73994da72b36667f2176131dbdecf24c7e9e03788a71605e067104b2edd6bd47360c5f99b8201796aa55ab8477ec4cfafffb4e1352ba02dd86bde4ea0b8e675487ec749b4ac24c40ab1efd75e351e8182e80ff0cdac79b3c1c19e06d8e7eaa6b921a0debe26bacc578105f33bb682f9aa1a99e81853e76074e9babc06dee334b90768ac601", @typed={0x69, 0x4a, 0x0, 0x0, @binary="31b0c00192936bb99c63f7cb5571cfea9d6c48831d7b845bb3573cf6b690759920e9c2ca93650440858f26b61048a2c258ed7ab541d88f8fba8059fb48937bab0600b40be49c82e518c54bb844f9d5f0831f61b68753eb04e2e207c2ea0ad7b72739861b80"}]}, @generic="18eb11c83f946647700804d22f01ba64a6ea59eed4d98207ba9a0dae7c1664f227297128f167399c24113d1c3efe46c3b7e93f054b83f5bae76bcab7088c48c9bb08f0562bbbbdd6c91274da80848e262f6250520df580ece8ca2faf3876986a3f8e35843538842af83765d519c70c7575b8ba95adec7856cbb1ef27a0eeb414fb231ec05d9a15ac9c5bde9c06225255e1743482bb368b47a52647d5e70f46d325afc71d61501167dcb4f12c2ddf2acecf34804cdb8aeb5660267a0343", @generic="7979cb9979f5a476c72c17d3e71895518d1275cf95983e11cefef2a9ef510a5fc435b11f89bd2dfdde31d8e6e892bdf46f4e21b966d2ef3d18dd62ae0f270d968cefff05c01c3b778379e8090449f28c49000d5dd51671fa450ac97409e2d848184f98d567617a608ee5c6f939fb78d2d1ab396266ac45e32aef27ff761cf1957d5b23ffc63523177877c37a2986e472105aab6c6e76d8232c37ee9164b0e65a9ac8b0f77e445bff0e5edd4c6d2569e5e9de91ad0fa698e331693c18c3ef8553ab8218534dce040f00215c739e8c3aae13f7723113179cf2335940c9a8958aa7dccde8cfcc7e82cbf2c423bcb839f75e02a6aed3f728ec4d84f5945fbbab899561e9426b2f4737b0cf7185aebeab9c666222184c1eb76cacc463d7d740d54ce0e1049d3cd01022fc433c6eb8baeb3a1bc5f6e672211c5099b77b94d0b13e038cde0dbb6a3c844d7398cb349fa4c6b88230acd9c1d0548240b709080ebf1591954ea2ed881316ef018aff8a236f517653f41f4f4ce14bfdfc45a6ab12b17ef44ec355ca9a18ee0031e80cd12fc26127c84da595aa1b4681a9e1f61ee3a5f143fc5d2222eb00d4bd492b31091e931e148c45f4b684d1014c159a1b0c5a62d117900e5b0782154843bcf46e867a160ab23d3dea8863d74288eb7acbd86500e756f6b7034d9dedd1ed6605a834c04d36bcb9092c20f6c54d6a6b9622735c3351a337ec372be30c7c53e485e9cbad27c720ff4e1b7eef57a79d0261be98269c73bf988a81e375e634640807a300defa932a2d54168658735c58c7238a1156c800bf60ca8c1347c232832d4da8a8c2afdb0cd2c05e5a97f527dbae9a13ce780c708731fcfb4553b775ca4a6ccfddef2755661ea8c47182205228beff7da979747ab03a89a53ed9090e48dc2d1d8c93a46f72649ce50e316c082c180e4bbbe156cff8b3b84caa56c757be0522ca00222c987e8cfc6b80f80271cf0253f5a512006b672cdbddc91ee64b61dafb60154655dba4e93b47bd6e2f5a2b6dac1b6efd9707a0309960ea4e98fa5a01623d4502ece55966506370bb14c5f51a9df439987034915681b9239f3b204d79c9746ee1819c368d167de43a89a45f854dc1018f9cac1acc82666fccbe5cb69e24be3237b3d621d28ffcb3f78c82269862476da873843b06fb3de552d6f5274b8b4647ca8fbf5ec10778600a70ae800822e108636d38716ebc03ca89de2dd8aa1f20c18d23a9d6ea541447640b23218fad44a61ec57335482245014293424e6bfa6d366365af9575306f175ff55aa80058c2ed3ed1a8fb5172584f4bb5ba7bc5e443ea5fa80e52295f910e7baa4997760e2bd8bf37be2ecc2feaf3940ff1725902de18156476bf5b4b2b2aab69e347a681a672c7c44a2a673e06e2d55c2f8b147a7e4b305fbed0edd52e0b06951aa43cf88120ebf42fe2b789734e7090d10e214ba712ccb785c0d64b383ef4a08736e795d6ced1b3992d45e81d00fa82cc6153f3d43c18994fe957b60ac9470f46473069fc24331e09cdd9d6dc9aa0c87ae92c409608bbdf2f3d44331c34aaa04161be6dffa37a1b33f74af8335b6c86c39205f2ee8f2f2b8e38bf8a3af222317b303a69b8465e00e341606c388a2d986f2c2933ad22a1b1f0a18a5ea99e749eeb0a71f60bc3fe6424105f0244b6da917987f5a900849d19de7bbcafccef4572906916d8b3bbf7d02f404e24a5e4c5f074930445eb1b00159edcd691a06c14e637af71d7ac588d8f14b14801890433bab2bf74c40d3a173637afc64c4d374fdd88479a5f365fa100587188398084d35d541fc706f8a34d8372bcde22096b51e260d46216f1ba12381fb19cb41556243f01613148aa1c24ac5782688da58b2f55ae3a0e6f62d1d4203a7f82b8a15962426948aa6eafff101878701e3c4698ae66be948620792f79ef7186befe56bb6fcbedbb2a32dbe0251752c00dc8dd6de511e648e0c7f47d2bdc465aba26fa07b07ee71954f99beff93422b5d15d1f2f16b0bf078f71a1569525edf79dc844fc746ac63695b83dd653bec2e617d8624f26891281aad7b164f2d68b4c37bf7a56cd724b3a89369a40dea0a61a95636c09efe912044148ec09e0734ae7ff1c93e3005634a2a9df0d0fbd3d248ae2b819e9f98e62b21837b24c0bbf3288211f9c98ec09594e2bdd499607b05281d11948fb2e1cf5ca2ef2dfb8db0bb23febc9169d7b4254bad7402f061e89f77afdc8dec0bf0787a7e2d8ba72e16ed6bfc06e6f7be85ee1c3b58cba923092f02755b1c4a7ee7de6a5402b8f9af340fb2ff9918ab7298075dfe02e3246e7feb047d1f73c4b5bf601d4500100ad94be4498a92ac9d7f0b273393cb4040c177bc69e11c5f04116f7c61883511dcf0d0302fb8caef7bff89199eb48257a5c36c562322ab9fcef9cb6cb84a3955cb8f286b50ddf4a33ced5ea1c17739966e18f810e4bd672b29c8748a285a4417df840c1e20786cded99a15f153b38ef6b8dbbd015d546a9ba0781eb61a698b5a30b74e24d848c266ef37b7316585b18bb4f66e93aef38ee0ee20b7d737026df98416637f0a1a576fd0deca3b0fa101a0edfcd79e888d08c362a83b2f2c6918398bd95333a407b87cc127a71c7fc6cf012d2a8181e9d0b0da6be5971a67b22ebeb5c9288047861d5369705439caeac39cfdc1e65fcd95203fddb998955d7f6d1e8457e06b04dfce64d618b5c58331cfa1e245aeb40ad254fb6f92d9fed81a89e86d82c51fa4957b31e52837f40708733502ee885732037d346a626b626200bc155f44ca74c213081746cbb8971f6b77f7681cf4446c2d6bdb819e0bc33fddf671792bdd6dcc971d179631a6f62f77e3f30762d6377b364a6fd044a6167a4add94500b3a8c7b39e8aa52f724822f75ed68cf6c937c8655def75957d8df4c1300c7cad25f13672aeb244db5456b8fca6c11f77e10c5186051280edf6fea8f142fd23ee531861e8a564703681b8559ca69e9356fababd1cf89570c6a0dd24e0331e3c1e92dba13fbda8a693c8b3bfd2586c81f30ce50ad692a9d165b4fb0dcba18bf2aae8d0a5e8a368a1781eee432c1725d706cf7681ad15daa70d6912043a0cd76dff9331aa011b94ca9f570e62a20d6331b76a1d7950fb1b5b0dcf6a25819c16ce446ee3b56cb2c28a70279b96064e3e073df2fdef1d186dccd063bc5ec1f8b82c0a3f14ddefeda094a9cb53f56fb2e3742e0d8474ee8e61128f5be088e5489c0f3e7a305e04625c65f596e44cafca27367bc616daf26c9b7a42e63dcdc68cba8f7e7d7f45a8b091bd4b7f9aa4675a96ed0c2f333d0de4614fcc24f7dc5c3e23b96039c313d853f2ab214c0c3ae0e1ad8bdfbf68eea7915f6bf222e25eee524aaa0738483f4a426788eb39b7357ff8ef6da208cdcada2ecb8ab1103b23e6b1f0ade82afd86b04c90b7bd0965f51ee5af6ac024d0597575d993252b10b4d5afb0e36d390ab6fd34e2ec217f310f702b1faa1518b1ceb60ec2522410fe89858ef8bfc4406f96db2631b361506c18d1ba6bf3ecaa6abd0770b09e24f97c728cd837848643a34aeb0466ce572cbbf07bbc16dd86f57fc1023ea499c249b8d49e0e38bba08008cdcca1acb4960f9b510f1899caf8c4ed5196d8a8028bacbc0458711f1c832312380b73e10735cc57348446023c5ec3c4421b6569aa9e07b29784cf7129abe30bfcaede5ec4693b86ee5b9c6e9ae7c3b077787e50f7f682b3b1e7b926ae3e88871b8c32378fde3a45d9bdc4de41743e01ad9c39b8fc06782e78658c759d93943e3f788c72a7df08c938caa8d1678ef47c838cc2cc7daebbb156381b099ebdd885b9ffdae51014dd80ad5b734207dd27f726af92a5a98dfea311428f683d3cf1baf18b5fb4551ad7d0d1e1f110eccba94a452884f796685c5e37ba5cad15dbbd4f5360701129bd123da88ab2b03d53fcc55160c5ab73376a31f6fd52291670b8a080dd960943f1d0ab5be1023fef26bdfa58c8e8fcba8301341ced26e6dd38db795a035862192a2642c35397795d0f80123050783fb16af22a192c3c730c7b73a0b430bcfa1276f1fd22496843a0362f58f98b0ff1ed1f4ac46c37f7acad141722b5d9d4e4468ddacf637b0ff0a2755463798828ac79751c070b6678535cbef383aa5d2df7037ca01d96d3fc7982ccc7d14c24dadb3fcbd6e42676ed6231a0520854d67f6eeecabaf59137e6a6e85d26c72d4b5e45d733f73c6effa51e4a4025674169161b90e34534220931fd0a4609bb941f57e9666656fbb782d29ef816c930fa92b93cb5a0cd527c1d69c66d39ac17c5c83a033754cec612583b951d775db3c28642b2cdf26879a2211cfd3f2f2286578f9fe92e54ef5931e9dac1032f9654d57ff99b5e0af01a06d75819d388a39981cab4f78613a699cf9b8a1bffa0b2cbfe35b74697de26e3a5d6431afa02fb34a2f2d455bc5c2ec59b308124e4213ffc249a37c387fdba9cd485d0c1a4710168b88d82d770f24ade28d49b2b73c6888d6eed692fe245cd508c5269b4b22082369f0fc6d8950b2e37a26545262565d7c4802a829e457b52c53fc2e48849f551ca81d3277664717e6bdd4b5e95e571e542545f82ee241178d1fa33dde6928842d3037b2213210911bd9aae7fce909f8449342192fec86e2f8ec55f54392ded924cbcbc5f37ea7151248a9826078446bf66169fad4a1815d47b22869a4273456e8462542beb40cc9579bc31895a3930e91412b644f4030625c03b22fac68dad7adc7c5a769003ba6828d462846ef591d7f6f9f1dcddb498504e23814bc86efc66032cc4e02a7e020f1ce0f800598bb2a27c1139fc18468c0889a79d70714ba21c98c50c97f2478831d789fa6caefa7fea5c6c11f09b0197350d32bf4df83af4d8b8dde62d1b9ad470e77dc9c5753026c036665b09d94e870851810aa9e55d55bdd04f8f1b70be903fbffc366e919d601707a455b76d043e41e1e7ed3b010a3ad45fca7c0cfc644019843773873aa4860cec303173258fc227a7909728029b5771d06d0efcd1ca9f525504b3c185da80f5e7233b2a4e01a467e35c713e0f65aa0decb175e5847d0f51437ac7a4e48299acb0ed7970bccf8501b883ee2f94a043ec7e336a9faa5a5901dc430dc1f2dd56dd746f36962c31d10ce4453d29f2a8a2a89cbe34f51331825f63a65e17693fccaf28896f76ae1de67cb13dfcf63f88ad39fa0bb1222a6d36e63973825f74a1e1f6f217bfa7f5fc37a238afe2143f369d186b26200876afa83004a9bcda4c99edc0d7ed952dc4f9c0b816bdc0e3bf782b5a63293bb0c5357c4ca482022e8d079c52e26b8753a36d792c1344ccf812039fc9d094262d28604f1c69b58218aec792c7424c34acee423291a5d6a0283a5a27bcabfbf7090830befac90dd5bd4e68721bf1fbefad424c1d649218e93b0a7b2c4a77bb4bb18ec07f10442fbb0624804aec624c34640996f6e04c7758ae366dc46cb02c108c91c6e0429b6703bdbf34258c209fc66968188ae8c73c9747efe070a39931ce6d819d82f5977d6b45ad386708bf3c6b7f0d2806fe82ea41a18aaeae50127db55bb67ab26038e3c7572f7072c14cb050a5263092f6215b6e49ec221bbd724d8e50abb0645f769b34500ad10e94125d03fdbc0f00f65485f5844948fff1ec9bcebfabc709dc980fbd1a6e721ba76c9c2553f7523d06f442f274792f233517ee03799b2b9f50b60eb07af292edfb35e184c22fbf955d4f29027b53a3a04ba529795046c3b3190e6e9c1658601b5d220704d1"]}, 0x11fc}, 0x1, 0x0, 0x0, 0x14}, 0x4000084) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8000000) 20:47:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) [ 1366.458602][T12459] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x5}, 0x16, 0x2) 20:47:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 20:47:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2010000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) [ 1366.884950][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1366.907031][T12488] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1366.916654][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:48 executing program 2: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000060300"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x1, 0x2) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x7, 0xffff, 0x1, 0x1f, 0xffffffff}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000540)=""/4096, &(0x7f0000000080)=0x1000) 20:47:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa08004500001c000004000002907800000000000000000134000090787f00"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:48 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 20:47:48 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2204000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040203"], 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x20004080) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000140)={0x1, 0x4}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xc8, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8001}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb3d}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40001}, 0x4004040) 20:47:48 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2}}, {{@in, 0x4d5}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x5, 0x92d842) 20:47:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8060000) [ 1367.936148][T12516] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:49 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@empty, 0x4e21}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x2}}, {{@in=@loopback}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0x7, @mcast2, 0x6}, {0xa, 0x4e24, 0x800, @loopback, 0x4}, 0x0, [0x5, 0x41f, 0x714, 0x7, 0x4, 0x5, 0x9, 0x7f]}, 0x5c) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$midi(r1, &(0x7f0000000240)="0bed6f1de923f869485be7d403a08203e8a5c231a0b68ca918011939dc9d450a4bac67872a7b8d66099322ad34c2851077213fa766d802f09592d36b02d99572d4dbbe1fd784b24083609acf30e8bef9c90b110049a24321441bb60a0729d5605c3a41f5ec00ac541e1f4f4bf40b2469e14da51ec4df14561888620063c7b67564d0511a97ceeaebb4791c9d67312b4b80c993f33fcf0238e0b433fd200647e98cf736ed1ea6c54b5125aa2897", 0xad) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000140)) 20:47:49 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 20:47:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406036710b508f704ef5a0429c1a81894f9ec0ef815aa68b0692cd00560250956df1c6aa428b0869c9fe8b223d5d4cc9bd0534afd8c5dcfe0c2e9c8bcd81c6bd77e21d412464a9ee81ba469f7393ed96afb75814f2ad6975428bf9104a85d9dd80da945ebd50e1e0e49f6f9072350d0289f71688772d1c2688a95f78442ce6d96a8fab4f3b405ca7df9475f893a992f613d1ca9fc0026a238937e12a6c8bd0d76d15120fedf47e415c67539d2dea375a41aac1efffa04e5c23c1cecc692d098de04c8"], 0x1c}}, 0x0) 20:47:49 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1368.213540][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:49 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 20:47:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406038e02aec0ab2b48827253324df1b11feafa4dc0eb945b84cea13b6b573aad595a6e"], 0x1c}}, 0x8000) [ 1368.375163][T12547] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1368.504270][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:50 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4008ae52, &(0x7f00000000c0)=0x60) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x404240, 0x104) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = fcntl$dupfd(r6, 0x0, r0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000180)={0x1, 0x100, 0x6, 0x8000, 0x0, 0x3}) 20:47:50 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'veth1_macvtap\x00', {0x2, 0x4e23, @multicast1}}) r1 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r1, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r1, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x6, &(0x7f0000000400)=""/141) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="749f4f2d44c76492603ac7019cc7259ccf8bb4803e272dfc760bb7b1886bf7d6a88ef8bb422a352194b2fe766180ac6065df5c7df1728e1b824a5572bb8e06e474b550396eac1ba815adb3e4688b0eff0784e39d8b26ca7703a041b228ef229569c874016f7e1e68dd680bd5776c8f0963d71aa650dee41d8ac75a1397fdc3b77f622d7fe4a0837fbd21f1e1e47da1714dde29fb07eb6d3bb491c29a4250b48a3e9d0a73", 0xa4) 20:47:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x3400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 20:47:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0xffffffffffffffd0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 20:47:50 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8200000) [ 1369.516972][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 20:47:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000080)="8557badac3bee3853576f82c84cd1f6217441a225be593e2f44a23b130392edd2b6458d2afe4742d07d8d641c21a0c9911411d4f4b5c068be75584f4c972e7ccdc6610cb14aa81cb6edf90d362c05d543ae570e5b57de2d192746d88d78b55d5f3edaaaab78107b41aa07dbc738b11253f808f2b1d630c7c4c1ab253", 0x7c) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c005b0000040603"], 0x1c}}, 0x0) [ 1369.601506][T12581] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x1c}}, 0x0) 20:47:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31]}, 0x40) 20:47:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x3b29000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1370.069614][T12615] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40000, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000180)=0x1) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x4}) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1) 20:47:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 20:47:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x3f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:52 executing program 2: r0 = dup(0xffffffffffffffff) r1 = socket(0x10, 0x80002, 0x0) close(r1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00'}) r4 = socket(0x10, 0x80002, 0x0) close(r4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r5, 0x7, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)=0x1) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, r5, 0x800, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c011}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xcf}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:47:52 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd000000) 20:47:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) [ 1371.229312][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1371.246390][T12641] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1371.368902][T12660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) [ 1371.416193][T12661] Unknown ioctl 1074025684 20:47:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 20:47:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r2], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x40841) [ 1371.744455][T12669] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x4040c94) [ 1372.166658][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) epoll_create(0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x40dc000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 20:47:54 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x242100, 0x40) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000200)="d41f579e937622d8d637c8b0aaf390a9f9cfe1586f15c10994080b30a535fa605811f85b32d35714f4c042980a8db8d4b6c9e21c71844ee4f5157146eb87e3d21eb199c3e15ceea7ee9f596e1899ae42b794b266b86b63e6aa2f5c968b17f27698721a63c4507b61697ec9533689ed266e0354fae4731c301e7e299709ad50c19e0384e9c22be15a832ef319715f328f6413ecbf23f017a7bd07f909799061f8d2dcf8711754085880de84f0ec263e91156b647070056472d13bbb4d3159ee45b09206eca0f8723bb0de8a343c726b67e982fc6f7c6d81444e60ab069fd31b2f10be65a6587c1d1c42cdefd77e035230be8424c5f06598", &(0x7f00000000c0)=@tcp=r3, 0x1}, 0x20) 20:47:54 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x3, {{0xa, 0x4e22, 0x13, @private1={0xfc, 0x1, [], 0x1}, 0xc066}}}, 0x88) 20:47:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x10000000) 20:47:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) [ 1373.618234][T12702] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 20:47:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) write$snddsp(r1, &(0x7f0000000040)="19e9eeec410325c61a4827b506fc3f702d08440271364eab813ba59029e906e16771983b80345dd303315a2eb652bfa9502be617d6d22fb54a6b187f55a86fda105aedfcb465e1ffc2d4abace669710b73529fc4a071d62d03b1abc506475c8965137f85ce90a6c31260c332dec60d7f4816eee635014bf80e377ed700ccbb889e068fd45f1a05d35b0fe1c15d18e4e7fa9abd5561cdf39c8fc9af8dae", 0x9d) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x238}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x20}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048080}, 0xc000) write$P9_RREADDIR(r3, &(0x7f0000000340)={0x45, 0x29, 0x1, {0x8, [{{0x10, 0x1}, 0x2, 0xde, 0x5, './bus'}, {{0x10, 0x0, 0x3}, 0xa4, 0x3, 0x5, './bus'}]}}, 0x45) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) getsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000140), &(0x7f0000000200)=0x4) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000100)=0x4) 20:47:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 20:47:55 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl(r0, 0x2, &(0x7f00000001c0)="b559a3fd47119bf9c681d33bb626de0d3b08a272b84568fa5447ac88dcdab1e6366a31c3017ccd66d42672adf6dd3c38731cd5d48703262b07a40e040f6543b106d9a5308043fb00cbce56919cae7a56aa93b161eba8ae078e202f4470f9b2778a837aca61a292f25fea541a2728c4084adf7aa4be050bf6ef94e976fb383fc750ef8707b1d080a22cad48a995d73f44997fbefe62d0869b003e") umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 1374.040118][T12739] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 20:47:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x4c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 20:47:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000041c00100", @ANYRESHEX=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 20:47:56 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) r2 = socket(0x11, 0x800000003, 0x0) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) clone(0xa0820000, &(0x7f0000000400)="d4ab19f152d9d4b78ba924c47a3925f58cb321d5ccc044c79a5874a7c6aac901fd4f031c0cd10d802733cfcb37cf2409e59bb1e6dfb3d7b952b6c87dce8a9c486dc66c2b1a24661f50cb1c5d5a6922557b97d5052c908ebc8543563d06176aab01ae6e679b2d2a29c4994d757b3fd4a6f034ac5f8546864955b837ee0c5e120f8f99", &(0x7f00000002c0), &(0x7f00000004c0), &(0x7f0000000500)="0f997ba6a1ce52db9accd7351d37751d8610d9df2506cd04a6e6f6a1bc23018c372ccbe82aad18a3cfad9f09d29bfec527d455947caac6f3cde29513385fded125bc53a216b5976115620a8a997a251258a30167e3d77e803415d97f0320e54f2ad040dc3c86a9aa016ffa8ec83c6e59d271285101bb4c849050b9a06a19807d682022147d7f0fcc361f082687ed0aa6840c") setreuid(0x0, r3) r4 = geteuid() r5 = socket(0x11, 0x800000003, 0x0) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000000, &(0x7f0000000200)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@loose='loose'}, {@nodevmap='nodevmap'}, {@access_uid={'access', 0x3d, r3}}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@cachetag={'cachetag', 0x3d, 'bfs\x00'}}, {@access_any='access=any'}, {@version_L='version=9p2000.L'}], [{@fowner_gt={'fowner>', r6}}]}}) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x14000000) 20:47:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="210d00000000000004014204010401050000020000040100c910fc010000000000000000000000000000000100074800000003100009000400000000a200000002000000000000ffffffffff09000000000000090300000000000000000020000000000000000400000000000000000000000000004e08f528fd7a578b32040d8f1a808f2f7335b3924c9ed5d45f306ca4b55d8e6c95abb940a223654db30dad30a2852c28a13a70c270345058e41811c33e611088640995cfd2a18db84104f1876e4bc8c995383d3a074bfd509e87d0811da82e5d42ccd2da6c19c9a490eda0f6529f821b350000000000000000"], 0x78) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}, 0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000040)={0x3, 0x270, 0x3}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000ab6c09fd9b82c2a0ae9daf70f1cf788bee5fa119093857c47b6ca75ed8c8fbfdb0268824388f80e7d88c49d6c4d1789b7d87ff75da78dbbef0dbf4d318a77764ad27f58d1d9b7fc35dcfdc5dbfde9a55f8fd443a0fa8644f75db4e683ee55ed58e5bac68d583f1bf5a1bc9a233319d07ba2379ea7d71bab8fb674ccc179202e22b8e1ff01e8221d041a4c727117894dc77c0fac58aa9312ae51b"], 0x1c}}, 0x0) lstat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)) 20:47:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) [ 1375.382264][T12768] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 20:47:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00f5e89dfe12f1841b75dc0cb2"], 0x1c}}, 0x0) pause() 20:47:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x6000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) [ 1375.745317][T12798] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x6800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 20:47:58 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x5, 0x201085400b409c52) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x86, 0x2}]}}}], 0x18}}], 0x2, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @nl=@unspec, @phonet={0x23, 0x6a, 0x12, 0xe0}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x3000006}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffe, 0x4, 0x80}) fcntl$setpipe(r1, 0x407, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="b0310000000000"], 0x1c}}, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00', 0x1) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000100)) 20:47:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendfile(r3, r2, 0x0, 0x7) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 20:47:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1c000000) [ 1377.119932][T12831] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 20:47:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f91}]}, 0x60}, 0x1, 0x0, 0x0, 0xc010}, 0x20040880) 20:47:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x6c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1377.309170][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1377.327223][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 20:47:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x11, 0x800000003, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) accept4$nfc_llcp(r1, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80800) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) ioprio_set$uid(0x0, r3, 0xfffffffffffffeff) chmod(&(0x7f0000000040)='./file0\x00', 0x21) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) [ 1377.524905][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1377.546568][T12858] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 20:47:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 20:47:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000000)='./file0\x00', 0x80000000000000, 0x1, &(0x7f0000000080), 0x1000800, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1], 0x1c}}, 0x0) 20:47:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 20:47:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f000000) 20:47:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x6e00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:47:59 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:47:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x22840, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e23, @rand_addr=0x64010100}, {0x2, 0x4e23, @local}, 0x102, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='veth0_to_batadv\x00', 0x7, 0x9, 0x81}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:47:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) [ 1378.481394][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:47:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) [ 1378.543005][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1378.544661][T12899] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:47:59 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="00007fac041603"], 0x1c}}, 0x0) 20:47:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 20:47:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7104000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1378.973372][T12925] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:00 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) 20:48:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406030bf0d9b4b27c927d57f86c54c1fce8acb9977662ae09f98984ee1159156f520b3a8d80bb33cec0c27ca3fd01be5b327946b717cb9b3a9cef7fad63353aafb3ffbd70ac7c787688c62c0d19a82d"], 0x1c}}, 0x0) 20:48:00 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) [ 1379.149362][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:00 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x40000000) 20:48:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7204000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) 20:48:00 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 20:48:00 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000140)=0xfffff801, 0x4) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@void, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1379.927614][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1379.953774][T12949] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1379.968858][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 20:48:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 20:48:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7304000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xf001, 0x2, 0x3, 0x1, 0x1, 0x1, 0x6, r3}, 0x20) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 20:48:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) [ 1380.314629][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1380.349019][T12978] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1381.114811][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x43050000) 20:48:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 20:48:02 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in, 0x2}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) prctl$PR_SET_FPEMU(0xa, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20000010) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x5) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @empty}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 20:48:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000044e502"], 0x1c}}, 0x0) [ 1381.665574][T13006] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31]}, 0x40) 20:48:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:48:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7404000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) [ 1382.027481][T13037] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x60000000) 20:48:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000080)) 20:48:03 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 20:48:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7504000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:03 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x48) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000500)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000500005070000000000ff00000000", @ANYRES32=r3, @ANYBLOB="0000c4a3244d0008280012000100000076657468"], 0x48}}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r4, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESDEC=r0, @ANYRES32=r1], 0x38}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRESOCT, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x5, r3, 0x25, r5}, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r6, 0xc0305615, &(0x7f0000000100)={0x0, {0x7, 0xf2e5}}) 20:48:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @val={0x2, 0x1, 0x1f, 0x5, 0x1000, 0x2}, @eth={@random='K\b\x00', @local, @val={@val={0x9100, 0x5, 0x0, 0x2}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x40) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1382.879853][T13062] __nla_validate_parse: 1 callbacks suppressed [ 1382.879863][T13062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1382.913269][T13061] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 20:48:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7604000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000000000300000008000900000000002e0e4f9fbdd13b054b968382550d565e1b2d14a3b208fde128cabf94e282c6b11c13ec80fc4a7f289cbdaef73f96f9e16a65de2b570ab24ce9e0d2b62820e8365d4330b24b2e7a4211b00466cba805256bdf513f78681afe28129f45b57845408a87b0f8000000000000"], 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan0\x00'}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x400) [ 1383.178680][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) [ 1383.220182][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1383.263585][T13086] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:04 executing program 2: modify_ldt$write(0x1, &(0x7f0000000140)={0x7, 0x20000000, 0xffffffffffffdfff, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback, 0x4}, @nl=@proc, @nl=@unspec}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32=r1], 0x1c}}, 0xfe6b9f7ff036bfca) 20:48:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7704000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 20:48:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 20:48:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7804000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x65580000) 20:48:05 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000100)) [ 1384.480202][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1384.504173][T13119] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 20:48:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x164, 0xa, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_1\x00'}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '\x8e\\\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x40000000}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, 'team_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4000000000008001}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000100)={0x7, 0x6d, 0x2}, 0x7) 20:48:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7904000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) [ 1384.830734][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1384.847366][T13139] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@val={0x0, 0x88f8}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0xffffffffffffff68, 0x0, 0x400, 0xfe, 0x2, 0x0, @private=0xfffffffd, @broadcast}, {0x11, 0x0, 0x0, @loopback, "b6dabbf74801acdbfd6a941c3e447b09d088254f8f8329ede5c3b82076109b0ad878baaf01e39195dc8fd138f613f32bcfe63acd9f651448e3c929ed9f9eda8daa966dbb2c6d2b41afce5fbdbbb96a25bfb6f6c3c6870b58c4c62e868bed0cde165f77cd"}}}}}}, 0x92) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRESOCT=r1, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES32=r2], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r7 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110000000000000000000200000808000300", @ANYRESOCT, @ANYBLOB="f99a74794c6a1b646c44cee027f99a0cd77594c7c828b09db0458806ced66b8aacc2cfc5951329f08afcab4bd0a0844a178bd35cd58689ae9f3f5718b63b99dd383757cb958ff039957382dd2c6c3c7b84e316713021a1418b10c8ff63e07f646dead5d776025807d8577e32ae4a56cc2c8a88088c019b541754d0c9e439beb69299bfa7e152cbf8b4131e9a910b1f1f876756347e2662ce46f1ef71e7b03c823549529da3f02fe5d41d73731d2f73a3d8baa4e81c29410d46fae8914306f5395ed7fc06ef891d8e37c6c0c08bef5c1c741217a3"], 0x24}}, 0x4) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040001}, 0x50) 20:48:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1384.918168][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 20:48:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a04000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0xff) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000406c52bd499bddb236b00a30611d3b8c9fd624ce7d32c26e9ff728b807b412c0ddbfde8635b8be21f162b7080b08fa1a993267976ae4a97e43548e25119ab14f98f040b0ac50c9133"], 0x1c}}, 0x0) socket(0x11, 0x800000003, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@getae={0x520, 0x1f, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, [], 0xf}, 0x4d2, 0x2, 0x3c}, @in6=@empty, 0x1000, 0x3503}, [@algo_aead={0xec, 0x12, {{'rfc4309(morus640)\x00'}, 0x500, 0xa0, "85494224b497ee6971032c207bf9912311d95f10256f019dff5a524c6c72bfc47e621ffd6069729944ff8b856dc13a30d4b9b1aa3fdc1f733d1fbacf9558f8ae9426bb129a01e0f2ace98da650b77ac47876b56bd55c994fe19b4fb287512cb613ec6a25c06be3dc86bd7967f5dfb6af7a5b14f8eef25d3b113856a5e9eb208b8247430be5be5b45388156b12e94e5b56e54da3dd93035d96cf6615c4956c5fb"}}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@mcast2, 0x4e20, 0x6, 0x4e23, 0xfffb, 0xa, 0x20, 0x20, 0x67}, {0x457, 0xab1, 0x1, 0x101, 0x9, 0x4, 0x86cc, 0x9}, {0x8000, 0x2a, 0x4, 0x10001}, 0x3, 0x6e6bc0, 0x8289373aa04288a6, 0x1, 0x1, 0x1}}, @policy_type={0xa, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x60, 0x33}, {0x0, 0x2, 0x5, 0x9, 0x8, 0x9, 0x1, 0x6}, {0x7f, 0x0, 0x81, 0xfffffffffffffff8}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, [], 0x43}, @in=@remote, 0x4e24, 0x7fff, 0x4e25, 0x0, 0xc, 0x20, 0x1a0, 0x3f, 0x0, r1}, {0x4, 0xfffffffffffff850, 0x80000000, 0x4, 0x80000000, 0x6db6, 0x7f, 0x4}, {0x5, 0x3, 0x1, 0x9}, 0x10000, 0x0, 0x0, 0x1, 0x2, 0x3}}, @replay_thresh={0x8, 0xb, 0x5}, @replay_thresh={0x8, 0xb, 0x4}, @policy={0xac, 0x7, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x80, 0x20, 0x2f, r4, r6}, {0x5, 0x7, 0x624, 0x4b1, 0xff, 0x9, 0x0, 0xffffffff}, {0x200, 0x0, 0x9, 0x1}, 0x400, 0x6e6bba, 0x2, 0x0, 0x1, 0x2}}, @mark={0xc, 0x15, {0x35075a, 0x6}}, @algo_auth_trunc={0x11b, 0x14, {{'tgr128\x00'}, 0x678, 0x0, "b657bde4f46bd5ee9b559301420e53e6bf7034450d8c4eb0391e345855c95b477df7ae0fe0703967cb06e12eca41058df32ce1b10bd674eea489f961836d6d0b3c477a6452dedd909624d2f68e961fbfec8643f844ac94483ec22f2a2b1dfc22e4ab76340defe261855f8edffd814fa25fca7963c4abfaaa5b6c794ebce7f423dc32d9e0d4fe1e88172f9eba211a325495528b98416f058104f9110333b8353b9a8e521458ff948450c2f28b61a85b833be42cdda71f1ab21010f767bd3921aa5c266f3267ca7c88bcce986cd3c683"}}]}, 0x520}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_open_dev$ttys(0xc, 0x2, 0x1) 20:48:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) [ 1385.331953][T13161] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1385.375868][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1386.222570][T13167] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e0000) 20:48:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 20:48:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7e00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:07 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getstats={0x1c, 0x5e, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x4}, ["", "", ""]}, 0x1c}}, 0x20000880) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002900)={'vxcan0\x00', r6}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0xffffffffffffffff}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x793, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc895}, 0x20000010) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00fffc048603"], 0x1c}}, 0x0) 20:48:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) [ 1386.690340][T13197] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1386.714327][T13199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 20:48:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 20:48:07 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x24, 0x0, 0x7, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x281}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="db991ce1452005fefd649fd535f73b7736c20a479a2240f815b463345038b476c1d770e38db74a69eb5d748319e34f0185bd01bfa86c3cfe22788377dd9b06de93c27eae5fcf8051fe28f13c662505d294ba2dc56a6233a976010995125519ff05d4f898c5aca44503fbe55cf4036dd1b540cb430f55f980fc147d3021018a12baf65dba4513e9d54afdfccc99a983f2e024634f5de4508cedd80e00"/165, @ANYRES32, @ANYRES16=r5, @ANYRESHEX=r6, @ANYRESDEC=r7, @ANYRES16, @ANYRES64=r6], 0x1000000c8) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) [ 1386.890228][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 20:48:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) [ 1387.140661][T13243] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x80350000) 20:48:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x8cffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 20:48:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001800000427bd7000fddbdf250a8080f0ff01ff0a000c00000800100000f8ffff20000880062487eb81cdaf9bc945345de765ac3e8b517622d93e4ece29a99f804f4fca38fb95c2da"], 0x4c}, 0x1, 0x0, 0x0, 0x400a001}, 0x4c0d0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c000000041a0025b0ee0d7acbfb75bc7c04b90e2bdf840ede8bdaeb37ab7bc84ceb51a71b125c3c57ed61d85b135bfb16db6589b0f9873bdee40677c147d807c7192404f82825f9caa1cf8ba25f9850bc22d32f150f93cb9a0e2dcaf4da7ccc70ca8244e93d3dfa817e7fbf343f85ff13befa63ca52d7ab19a553a01d90ff"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'gretap0\x00', {0x1}, 0xd1}) 20:48:09 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000200)="4a6f90444ea6a0a13c5c9c8c91a79229b14f9ad48382f20243054399bdde467add795676f1c69824649207156ed42bb5a940c887d6acf9cf9e123ac70a22a1c2330d5ab50dbd3104bdc0353764c7be4ec05bb188ca4f0e9e195959a58a8cf31b44b5977f148ea44d2d8b68a58def9e6ca8fff1229980aecb67ce32779eaea9416c62ba36d95dc12d97", 0x89, 0xc000011, &(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000100)={0x3}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0xfffffffffffff340, 0x0) [ 1388.302406][T13284] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:09 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x31, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 20:48:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 20:48:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 20:48:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf0ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:09 executing program 2: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x800, @mcast2, 0x1}, {0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00', 0x1f}, 0x6, [0x0, 0x8, 0x9, 0x0, 0xadf, 0xfffff801, 0xa27b, 0x3]}, 0x5c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe4, 0x3, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x58, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_ZONE={0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_STATUS={0x8}, @CTA_PROTOINFO={0x2c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x28, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x20}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x19}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xd1}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000) [ 1388.702233][T13318] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1388.743273][T13325] __nla_validate_parse: 4 callbacks suppressed [ 1388.743292][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf5ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1388.908869][T13326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1389.005159][T13331] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x81000000) 20:48:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 20:48:11 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x69, 0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@rand_addr=0x64010101}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0xffe0, 0x0, 0xffffffffffffffff, 0x0, [0x14, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x6d4, @private2={0xfc, 0x2, [], 0x1}, 0x1}, 0x1c) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) sched_setattr(r2, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x10001, 0x5, 0x8, 0x3, 0x1b, 0x8, 0x3f}, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 20:48:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', r4}) 20:48:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf603000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x420040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004960}, 0x1) [ 1390.095418][T13353] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1390.120620][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1390.144785][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) 20:48:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) [ 1390.226476][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf6ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 20:48:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) [ 1390.538937][T13390] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf703000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1390.761148][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1390.924193][T13401] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x86ddffff) 20:48:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 20:48:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 20:48:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf803000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:13 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/244) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) [ 1391.950853][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:13 executing program 2: ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x10000, 0x3000, 0x7, 0x8, 0xff}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x484500, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00920a674a03b2413b1fa22a3f74d4d7f133c4390aace255697132a324ca7559650958071a7c99a712b21de21f4c2f47d5dd885b36a6d2b9657c036f"], 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000140)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @adiantum, 0x4, "161ae747b08f1e83"}) [ 1392.025341][T13430] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 20:48:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xf9fdffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) [ 1392.499060][T13451] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:13 executing program 2: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88470000) 20:48:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeffff7f00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x400c000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) recvmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000540)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000000280)=""/185, 0xb9}], 0x3}, 0x22) r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000400)={0x22, 0x34, 0xff, 0x7f, 0x8}, 0x6) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x4884c2, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000380)={0x2476}, 0x4) mkdir(&(0x7f0000000480)='./bus\x00', 0x100) 20:48:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 20:48:15 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000000c0)=0x3) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) sendmsg$AUDIT_USER(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf4, 0x3ed, 0x100, 0x70bd25, 0x25dfdbff, "4705558447cdfd6571315530651594bfbaf7ab08824c3245dbfe524fa01193e5aad0b956bd71579181c5cd97da5136605b3e4d44df002cc9443c81cacbcbcb9c63f382eb0c3e548b046570019db157d6cb9f0d353080fd2fbf47929008c48512d9d63ed1dbb597933f3af9a9968dd799b4c96ec754ce94aedd8b1facb666c8e16f972e85695cd2f247a278b4bc05259e1ed0651510e309f659168685c19ccb944b444ab54318dc99720786e2577c16a0c3adcd368b73a4487767950a9843ce2da3907dfea2f6398bfafa68f3a2d46fbd8758923fea990c1fea7714de9187e2aabec003", ["", "", "", "", "", "", "", "", "", ""]}, 0xf4}, 0x1, 0x0, 0x0, 0x20}, 0x40000) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1394.269270][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1394.288235][T13472] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfeffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1394.324125][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 20:48:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31]}, 0x40) [ 1394.597824][T13495] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB="aad184f3471af3e06adfd16c8840df0185e2cb6bb75c7cd6acf4f953ee3b02920535180891f913173d0b6b3cda07a37875e0242bc482f75429192aa2fe74cca65a68b7ad9b8e81aaeeea7d11eae5e875e38361559dfb9f73e752eb3a238cb98e7a222588a9e92b66c16ae6ced3b093f75d4c99e7defe0936d37805492341e0f46b0bb98ecec40c3bce8bb93fe183671e5821d73fb3b2", @ANYBLOB="e51c780e15fbf31539ca8d428c974c6f5548dc986a43faef2a71d2548651efb0ac593505637c4839bb6009259d907e30283ff500160883393f5d6ac0daa07c88d6bd5a195ee1ed49545aecb50bbaff5a9acc0d4b2cc5e4d8f27aeaf45ab8a92dc08a3cb4e52d1346831085a1dbcb0fe0a704c4559b24cbdadb3e45582e411ff91f08e5c12e1df645235e8ee27c7a280011c75835b4531e0c7bc9c4a83e744a76020a93c15e9561515a"], 0x1c}}, 0x0) 20:48:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xff00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1395.105732][T13510] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xff0f000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1395.514303][T13518] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88480000) 20:48:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x10004001}, 0xc000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x3}, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x10000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x7c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_DESC={0x68, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff7ffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x210, 0x16, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x194, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_DELSET={0x38, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4dddc360}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x360}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f00000001c0)=0x8000) 20:48:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2}, 0x40) 20:48:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffdffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:16 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x9, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) write$tun(r7, &(0x7f0000000200)={@void, @void, @ipx={0xffff, 0x3e, 0xa2, 0x1, {@broadcast, @current, 0x101}, {@broadcast, @current, 0x7}, "82228d66f9ba13fedd60953e0a7f2500000026c99ef549170336b7aff99e439a"}}, 0x3e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1395.967321][T13530] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x3}, 0x40) 20:48:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@ipmr_newroute={0x128, 0x18, 0x1, 0x70bd2d, 0x25dfdbfb, {0x80, 0x20, 0x0, 0x80, 0xfd, 0x3, 0x0, 0x2, 0x1000}, [@RTA_GATEWAY={0x8, 0x5, @multicast2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_METRICS={0xb1, 0x8, 0x0, 0x1, "17341a09f224cd3e138a608b6c816f9480b138d646f263685ab64f14c4a83dac3e127e36657269b859358b21cc5853b39147999f4a6ed99218964bd4c3a007c14eac673e54925eb4fad89bcad0cb62cac2d3ce2125ce05b788719c057c8d5c266692fd5ad2b260b1c57de2885de48c839fa4340f1b774d2e6d3344bf97465fb23deb3e4e1b57af96272bf098f6884a35d5b9f0da0dc1b8872745cd5d4c42c216f941bfbc6024743e2ba28cc656"}, @RTA_UID={0x8, 0x19, r1}, @RTA_IIF={0x8, 0x3, r4}, @RTA_METRICS={0x21, 0x8, 0x0, 0x1, "6ca18ce2ee4e007f9a8f9911a67165812f5c252e7f23c6d34fcd3cc816"}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x7f, 0x81, r7}}, @RTA_UID={0x8, 0x19, r8}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x80) [ 1396.009681][T13532] F2FS-fs (md0): Unable to read 1th superblock 20:48:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4}, 0x40) [ 1396.138981][T13532] F2FS-fs (md0): Unable to read 2th superblock [ 1396.245549][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffff1f0000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x5}, 0x40) [ 1396.332106][ T12] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1396.412063][T13553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1396.472375][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1396.489059][T13561] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1396.572190][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 1396.654054][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1396.665395][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1396.684573][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x6}, 0x40) [ 1396.692942][ T12] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 20:48:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffff7f00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1396.747331][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.789336][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.840026][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1396.907524][ T12] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1396.942164][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.985332][T13582] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1396.994956][ T12] usb 2-1: config 0 descriptor?? 20:48:18 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88640000) 20:48:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c046ab0"], 0x1c}}, 0x0) 20:48:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x7}, 0x40) 20:48:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1397.712295][T13601] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1399.012193][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 1399.018476][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 1399.046775][ T12] usb 2-1: USB disconnect, device number 32 20:48:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x8}, 0x40) 20:48:20 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) fanotify_mark(r2, 0x1, 0x0, r1, &(0x7f0000000140)='./bus\x00') 20:48:20 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x0, 0x3, 0xfff, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) 20:48:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88a8ffff) [ 1399.310483][T13645] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:20 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x9}, 0x40) 20:48:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xa}, 0x40) 20:48:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000001040603"], 0x1c}}, 0x0) 20:48:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xb}, 0x40) [ 1399.619096][T13672] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:20 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="03000000e905b46bdb03"], 0x1c}}, 0x0) 20:48:21 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x80001) fsetxattr$security_evm(r4, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "d88545fc9adb61fe103e30c579ba85b2"}, 0x11, 0x1) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:21 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYRES16=r3], 0x1c}}, 0x0) 20:48:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xc}, 0x40) 20:48:21 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0xee0, 0x0, 0x3006, 0x6, 0x2, 0x3, 0x2, 0x1}}) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000001640)='./file1\x00', 0x3) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000001600)={0xed}) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000400)=""/91, 0x5b}], 0x3, &(0x7f00000004c0)=""/147, 0x93}, 0x21) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) 20:48:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88caffff) [ 1400.825855][T13702] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:21 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xd}, 0x40) 20:48:22 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xe}, 0x40) [ 1400.994957][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1401.069262][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1401.097574][T13719] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xf}, 0x40) 20:48:22 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1401.590241][T13740] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x10}, 0x40) 20:48:23 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000540)="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", &(0x7f0000000000)=@udp6=r2, 0x4}, 0x20) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x1000) 20:48:23 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r3, 0x4, 0x6, [0x1f, 0x4, 0x44, 0x3b, 0xb85, 0x3]}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r4, 0x2}, 0x8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:23 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x787502, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r5, r6}, &(0x7f0000000300)=""/173, 0xad, &(0x7f0000000500)={&(0x7f00000003c0)={'rmd256\x00'}, &(0x7f0000000400)="2ce2f2804dc979099d8aa046608bb3cbab716775b88a55d591d63362321011bc01245060183ec415725e00f7454f82eb4ee0320dabc9836f07067ea24d9dd30beb7c7265906f6f35db3545c467b042bba8c5246287ab00d86e7c0f8cb0cc527b664feacaa200dba24fd71623a46edb6270bd16d525500654d02a7efe0c3192a26343787661fae57b98c0fb886c51bc693325fc9bde0901a811bad7580d399d64a07b4336350bbfa30ce34f07156c326931d74c53bfc82851bf90373df2632c90f84ca90b4bf7692619f24bf7c489adec0fa3683e63d57add2359fb5886", 0xdd}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0xc02, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x9000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1402.260506][T13768] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x89060000) 20:48:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x11}, 0x40) 20:48:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00007d666b8fc6e64d5ba4d0777ac482f2a453f080ed5ca5031b48656b2a7c3036e111e5444edba28d629e5e6946f23715767dca054ad6a94914a882ef29efe78f32e9760c5e89e7f0ef4c5751a7deda09b01682bebfac5c1e45f51f9a305d4d2314a66c35d124cc58f5c4e970307e5aef9912cfab1113e0f18fdce3ab75770c5a7b21abca85d0bafb0cd47cacaea84a41c6a5104871125107b75593af9de23247278f109fbbba92abf588"], 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000070000003500000000000000850000000700000095000000000000009f5fa7cd462cb7a2885e3ad087881cd01c40dbf7f54efa9f87b3ed349e7bbe02ba8e2355abb04e340000000000000002d7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff18}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r2}, 0xc) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r5}, 0xc) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0xf0, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS_MASK={0x14, 0x17, [0x4c, 0x6c7e, 0x4, 0x6]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000800}, 0x20058040) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000080)=0x8, 0x4) 20:48:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MCE_KILL_GET(0x22) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x12}, 0x40) [ 1403.442087][T13799] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:24 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f0000000100)='./bus/file0\x00', 0x301042, 0xce) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRES64=r4, @ANYRES64], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000480)=0x18) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000580)="7dec862460c3ac1be995cead1cb728320b30a394e7743982134816a0cccfeeb831b1b21c769d2248184e230c762656439e85f2705c9b") sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000680)={0x1000, 0x1, 0x0, 0xff, r7}, 0x10) 20:48:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x13}, 0x40) [ 1403.678805][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1403.897170][T13822] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1404.343858][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002faa630238060300"/22], 0x1c}}, 0x0) 20:48:25 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x9, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:25 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x14}, 0x40) [ 1404.546673][T13836] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:26 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x894f0000) 20:48:26 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r0, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r0, 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f8, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008014}, 0x4004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0xf, &(0x7f0000000100)='%+*/\x1f/^\'&$\r\n--\x00', 0xffffffffffffffff}, 0x30) r4 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r4, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r4, 0x0, 0x0) rt_tgsigqueueinfo(r3, r4, 0x14, &(0x7f00000001c0)={0x6, 0x4, 0x4}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:26 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x15}, 0x40) 20:48:26 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00'], 0x1c}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x9, [], &(0x7f0000000040)=0xf8}) 20:48:26 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1405.885654][T13857] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:48:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xb, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x16}, 0x40) 20:48:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r3, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/rfcomm\x00') ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x22030) [ 1406.119997][T13879] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) [ 1406.150920][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1406.290271][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xf, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x17}, 0x40) 20:48:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x2}, 0x8) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f000000040603"], 0x1c}}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xe13e) 20:48:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xee0f0000) 20:48:28 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:28 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x18}, 0x40) 20:48:28 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000100)) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:28 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) socketpair(0x29, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) write(r2, &(0x7f0000000200)="a1cdc6aecdbcdc4026a10569eba6cd8aa10cdf9adc1ee694f7adb4bdabae6bf142ecca00fcdf802e9d5b23155b9c5f3fb80e9866ab3da94cf678fc94ca73f79a41b31c251ce9e3f44cb6af4d68766dfb97bc0af025af02d8760a0d95dd8206cc09917ddba8188c289064b88837b6007533435be3a97928e479bbf76c7ab4ea6beeba6c5909c580bf9d5a55398567163950eece947caa8c19155bf0570c21d0c67fdc4a299ea24fd8dcc58a2bf8de375b127bb5745944f46e6f74c75c7fe9ae4634ec1b4621bac6b3bc4901bbb49eec428336e639a65b06c77ef5ce82e132ea3959780f", 0xe3) r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r3, 0x0, 0x0) capset(&(0x7f0000000300)={0x20080522, r3}, &(0x7f0000000340)={0x7fff, 0xe0000, 0x7fff, 0x4, 0x5}) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) 20:48:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0xc7c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xffffff78) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000130008f4b2c200854fd873"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x541b, &(0x7f0000000040)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x3f, 0x2fba, 0x4745504d, 0x1, 0xb, [{0x5, 0x8}, {0x7fff, 0x101}, {0x8}, {0x101, 0x100}, {0x7, 0x4}, {0x1f, 0x10001}, {0x1, 0x1}, {0x2, 0x80}], 0x46, 0x5, 0x4, 0x3, 0x1}}) [ 1407.855126][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x19}, 0x40) [ 1407.898745][T13944] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) [ 1407.922156][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:29 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 20:48:29 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1a}, 0x40) [ 1408.181812][T13972] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1b}, 0x40) [ 1408.319198][T13982] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1c}, 0x40) 20:48:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfc0f0000) 20:48:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1d}, 0x40) 20:48:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{r1, r2+60000000}}, &(0x7f0000000100)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x94, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xc027}, {0x8, 0x13, 0x81}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x80}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040}, 0x91) 20:48:30 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = getegid() r3 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r3, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r3, 0x0, 0x0) r4 = socket(0x11, 0x800000003, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) statx(r6, &(0x7f0000000940)='./file0\x00', 0x4000, 0x8, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000100)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000001c0)="86add011cd7ce485b05ed3e5e7d8104c34c8b32ca3e3152e3f0dcbfb2271b085f931680cc5266e8bf2fd7498296d4dc51ed84af878ad6402496c686724d9b87ddb997171abe6588b9b18d038c3c76c46fdf6a19cdb1bcb14178a4d8001c23c306010ef08a84718632fedbd4dad6c80850c756d4b2468e3f3fd4e325617c3e2f612d2a62cabcfa36c0be10a2f1e2bc900e3fd0d100f2ba5c6127015272aa069573d07cd56caa8efd349b8bd2df712fc48dc", 0xb1}, {&(0x7f0000000400)="9e13353775673fb5d072214f1d30c4aa356c8ab3a7331ea97438acb45386cb78be213c73d7a17df56062bee10d24339a9638ddd66a7988f3b87288054ff969954a8b76cba25388859ed6df9536542764da7e955a2ae8fb989581ad9b320f9d8ec28746b8b94031542ac1667a99b73b0a9b7adf3456aeb2dcf65f56b21f38552b737619a4b449dabd2219ae00b8e405d8939af313f67af2ba99bef2a423be82a5fc1b1ff058", 0xa5}, {&(0x7f00000004c0)="df6b03ed35c29625d5f95948b8fa7404a4f38e92ee41deca5c96488c79e0e1c3e5c66c3d01af213e64a7f6c062f3ffd0cf79a64475c1d51df6c5fe28f572b3fbef0b5cefbf0df726888f6994fef2ccddf9ca252275beabb28e15ad980cabea7f36c4d04dc1748abb97e0c6dcd7486836073beb4f059ca753d3de9adfe368ead2978979dd35de45c909a7", 0x8a}, {&(0x7f0000000600)="feec112aa24ffdc7a71698b756509747e8c10e584940f38daee71dd9a094d143e6f81604ffdd02cafae8bb438fb157b82d963f8f5cc28a02482a3ad09359a6e50ade836efb813b021936fe1ac1d809346a5f4d17bdc50efc432084609ea882d5ad1186d42dcc3ca4827b3145ec633b6037813595db6f7951f4cf5021e1a0d04f2c464063f0b738b5e9ee3908eb28985583f59675547887c4574ea3f1ca223b8aed780a31338b", 0xa6}, {&(0x7f0000000280)="a79aecc9aa402ccb5a24aa87f781dde73380044f519a40c6aa76c35c515ae660aad34154a3801e4c73cd9f35fa853364c753f9a679dd86c9f897ecb74addc32fc0af247bd4c32a099e7ffa", 0x4b}, {&(0x7f00000006c0)="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", 0xfe}, {&(0x7f00000007c0)="e56e25561b3c36b62ada6ef9a02da6bff7c9bf19219f401874ea88145b50496ad26976e45e436cabf19920e2d7b76f4bb0478bf7ee3f36443a844c7df1a35391c3e7ea66f7ebaf52a1b9a30474765497dae278fdc2ad26c175aa6e94f11947f45696cb8f03c1ae2f34742ae2352aa43576ce6a23878ede2b43cbb760009351c3ef83b20ba4a8ad31ce7538af3a", 0x8d}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1000000000000000010000000100000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="00000000d36b5c8456e62cd50100000002000000", @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000090c1966f75ee1e06ee2ad32b08eacfa84b60e9e37730a564dcc12f95cafdb23ea4ea31d5616de2d161bf8289af12b66646e7ba63df0c0f99442197caf3fe16243291813e81d8e1e0318c7cb1d26292d9251205f6bacc13f43492e2947bab83d7a153f91e980f65d0da0c2c3201410a511b827e1337b0627d345b48c81cc06eb41aa937efd0d488f6cb51dcb8000607ef2e6f68309e7a85416df1109e12a94ae89b36405bde0cfef101e6f264"], 0x90, 0x51}, 0x4000010) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0xfffffffffffffff7) creat(&(0x7f00000001c0)='./file0\x00', 0x4) rt_sigqueueinfo(r5, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r5, 0x0, 0x0) capset(&(0x7f00000000c0)={0x19980330, r5}, &(0x7f0000000180)={0x7, 0x6, 0x5, 0xff, 0x9, 0x8}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1e}, 0x40) [ 1409.489614][T14023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1409.508995][T14022] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:30 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast2}, &(0x7f0000000200)=0x10) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000280)) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000080)={0xa0000000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$IMGETCOUNT(r8, 0x80044943, &(0x7f0000000100)) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="acbc001f80e7"], 0x1c}}, 0x0) 20:48:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x21}, 0x40) [ 1409.859290][T14050] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:31 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x31}, 0x40) 20:48:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) [ 1410.075053][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1410.088484][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:31 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffa888) 20:48:31 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x25, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603"], 0x1c}}, 0x0) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000640)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=0x2, 0x2}, {&(0x7f00000000c0)=0x2}, {&(0x7f0000000100)}, {&(0x7f0000000140), 0x1}, {&(0x7f00000001c0)=0x2, 0x2}, {&(0x7f0000000200)=0x2, 0x1}, {&(0x7f0000000240)=0x2, 0x1}, {&(0x7f0000000280)}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=0x1, 0x2}, {&(0x7f0000000340)=0x1}, {&(0x7f0000000380)=0x2, 0x1}, {&(0x7f00000003c0)=0x1, 0x1}, {&(0x7f0000000400)=0x1, 0x1}, {&(0x7f0000000440)=0x2}, {&(0x7f0000000480), 0x1}, {&(0x7f00000004c0)}, {&(0x7f0000000540)=0x2, 0x2}, {&(0x7f0000000580)=0x1, 0x1}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=0x2, 0x2}], 0xd, 0x16, &(0x7f00000007c0), 0x0, 0x0) 20:48:31 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x300}, 0x40) 20:48:31 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) tee(r3, r3, 0xbb7, 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1410.966712][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1410.984217][T14090] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) [ 1410.994862][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:32 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f00000000c0)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)={0x3, 0x1, 0x1000, 0xf9}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040603c4ea0e264a13"], 0x1c}}, 0x0) 20:48:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x500}, 0x40) 20:48:32 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x30, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406034275b3f7fa55cdd1899aebae108c8ec0b665032681ea4483f8442b26f0878b314825b4e48a4002a36ba7e1e196b075a1d83f737b8be6c82f5e4a8ac8b7ff86607e93ec502aa9400fb204597e0300303bc3bb1e086ceaaf59287b5a3ff5256a45da4ada79ea17bd626ad3b43f4034152859f4085ec0c48442215c97c7c9fa3e04b5603bede1b2f863976132c434cf8ecdd07dc2a33c6e87c11e269f7b9df5be2f56a6327d7be10c57575ff4f1d748bc993c"], 0x1c}}, 0x0) [ 1411.221865][T14112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1411.297223][T14115] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:32 executing program 2: prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000406039018333789c600dc29afd4830e8a52c1f576ee495fa28cfc12a5394798c1fc91275475f95749c42a8f9ff3e9"], 0x1c}}, 0x0) [ 1411.337377][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x600}, 0x40) [ 1411.506337][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:33 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3c, &(0x7f0000000080), 0x1000010, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x183) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) statx(r0, &(0x7f0000001840)='./file0\x00', 0x100, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001980)='./file1\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000140)='./file0\x00', r2, r3, 0x100) recvmsg$can_bcm(r0, &(0x7f0000001800)={&(0x7f00000001c0)=@rc, 0x80, &(0x7f0000001740)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/70, 0x46}, {&(0x7f0000000140)}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000001400)=""/86, 0x56}, {&(0x7f0000001480)=""/120, 0x78}, {&(0x7f0000001500)=""/182, 0x7c}, {&(0x7f00000015c0)=""/82, 0x52}, {&(0x7f0000001640)=""/249, 0xf9}], 0x9}, 0x40000002) 20:48:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x700}, 0x40) 20:48:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffca88) 20:48:33 executing program 2: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0f2ae0f6"], 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)=':#\\\xcd}H{:\x00', &(0x7f0000000100)='./bus\x00', r0) 20:48:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x900}, 0x40) [ 1412.504280][T14147] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x41, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r5, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r5, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000200)={0x2, 0xffffffff}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) connect$pptp(r7, &(0x7f00000000c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) 20:48:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1cd02c00040603aabd24a3442e632fd78fa62b18922987d8f19c6ba820b756507974c86a337bd6ad19a534ed0327e9df7be138ac15fd6652acb6203b8e5066f7733f8b2c2637b13f931ce00ba07cc34b5bf4712748174f669417e9223cddf27e40a19f7bf0eedfbef53e3037254b01bf6b2ca5815f2b35be0a76", @ANYRES32=r0], 0x1c}}, 0x0) 20:48:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xa00}, 0x40) [ 1412.709727][T14166] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x1c}}, 0x0) 20:48:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x45, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:34 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x2803000, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xb00}, 0x40) 20:48:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000800) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x104, 0xa, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={[], [], @empty}}}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan1\x00'}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffb}, @IPSET_ATTR_COMMENT={0xb, 0x1a, 'batadv\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf7}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x80000001}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0xc040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000040603341226b46fbbe48eec2e64a322d30aa35bd4d02b50e5409d8c275bf5baee84dcaf2ab11c146fc8fe10576ef13a19164b75956be02207000000000000de11a42d442182c142d31c79ff6064737896361cf0e1e0a637451e15b1103232dc11edda523f09991bfbde960f0646de87fd3abbf7e97ffdadc261c332b6b8636cc148e257eedb155837874024902d81e95fa75419503e84293a9d5252ee07112718b392d96a8a6fcd954a07c1b68fb28383debf275118f90a22112b7652ba7076d6023900"/235, @ANYBLOB="fca2b9dc37011aa8b1e01b9f80f9fdae68ba8df929c8050c951f40950ee26a04a8e6f5bfebe6190a6cf8bf3eae0f7d8b2c74b5f2b26933d8baf1381555fa6c713cb22ceabd3182b8f20aa3452201f7cdf1fa256a3158a7eb9e22fd9494bb002b0ece0c41728220af3ac4b749a7001e87b4e002562aaaaa08149fe29bb8bf08319d2509a604e8c24947cbd136f39015ac09c7ac1cc15e22fe81b2e0f39b95465a2bcaf9d68c69622bf8d456fa31b5001b027f3c51ad3713389051902d318c4d8b3d92803091b7428a94547394161a22fe41c3ada809ffc93a93517ffcf46af21e"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x26cc800c}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000841}, 0x20) [ 1413.083601][T14191] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) [ 1413.213775][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1413.250118][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:48:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xc00}, 0x40) 20:48:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x47, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:35 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010102, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r1, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'vlan1\x00', r1}) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x8000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000002e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002ec0)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000030c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003080)={&(0x7f0000002f00)={0x174, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKMODES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x900}, 0x1) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:35 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffdd86) 20:48:35 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f00000000c0)={0x1, 0x200, 0x40, 0xd4, 0x3, 0xffffffff}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xe, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40011) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) 20:48:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1414.524346][T14234] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xd00}, 0x40) 20:48:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x49, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xe00}, 0x40) [ 1414.782227][T14260] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xf00}, 0x40) 20:48:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) [ 1415.071943][T14277] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:36 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000200)='.\x00', &(0x7f0000000240)={0x60000, 0x40, 0x1}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x111, 0x9}}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty, 0x0, 0x0, 0x1}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0x17c}, {&(0x7f0000000100)="462f2397a285ffa3e5cc450228c02020f613cecfb56aa56b38b43e9bd88982751eb6c48216d5d1089215cf7d962ffe80471296d611f68bf0ba80fe2b62e7174b8e9821d97ca26d2e62cc09533b7a3734058b2cbcf5679d4434d842ea94cd", 0x5e, 0x91}], 0xf9c4ed8027692b5e, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x1, @addr=0x1}, 0x8, 0x5, 0x86}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000005c0)={0x0, 0x7, 0x8, [], &(0x7f0000000580)=0x81}) 20:48:37 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8000000000) 20:48:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1100}, 0x40) 20:48:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4c, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) 20:48:37 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bb}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@multicast1}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x81, 0x280000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x24, r3, 0x11, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x68, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c2f791bd9d4096f38135f993b8"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "97e4e7bd0d99d636f207eeb854"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x480c0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$sock_ifreq(r6, 0x1df51, &(0x7f0000000200)={'caif0\x00', @ifru_flags=0x1000}) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:37 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x7, 0x1, 0x2, 0x9, 0x8c8f, 0x5}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) sysfs$2(0x2, 0x0, &(0x7f0000000200)=""/99) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000001c0)=[{0x1, 0x1, {0x1, 0x1, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0xfd}], 0x20) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) [ 1416.324933][T14311] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1200}, 0x40) 20:48:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1300}, 0x40) 20:48:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1416.586317][T14341] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1400}, 0x40) 20:48:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x400000000000) 20:48:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1500}, 0x40) 20:48:39 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000780)) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x990000, 0x9, 0x5466cb66, r0, 0x0, &(0x7f0000000100)={0x990a6a, 0xfe, [], @ptr=0x401}}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000280)='posixacl\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x307400) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000400)) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={r6, @in6={{0xa, 0x4e21, 0x3ff, @private0={0xfc, 0x0, [], 0x1}}}, 0x0, 0x68e, 0x8, 0x80000001, 0xc9, 0x10000, 0x3}, &(0x7f0000000580)=0x9c) 20:48:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) clock_gettime(0x6, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000180)) 20:48:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1600}, 0x40) [ 1418.040120][T14386] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4f, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1700}, 0x40) [ 1418.346868][T14415] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1800}, 0x40) 20:48:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x61, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1418.559157][T14428] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x100000000000000) 20:48:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1900}, 0x40) 20:48:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x62, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:40 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x214083, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f00000001c0)=0xe) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="020000004b08002dce0cc544ffb285bbdf89000000aaaaaaaaaaaa08004500001c000004000002907800000000000fc504b1384209763a23a49ae0520300020017e25fb0b6dbe905ecae908acd99e3faf3f6e6840f60321ba7af0522382b32d842f1075bebd578f94201a28d1532f7e8d5db7d0a1fe6a6479d949ce49a01002b056deddd973a68aa2d4ea712c1a916cccdc4870e334ad229344354121536842bee04eee3e7e93d1e8d"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) bind$tipc(r1, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1a00}, 0x40) [ 1419.714392][T14458] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x63, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1b00}, 0x40) [ 1419.932170][T14478] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x64, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1c00}, 0x40) 20:48:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1d00}, 0x40) [ 1420.182253][T14494] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x200000000000000) 20:48:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1e00}, 0x40) 20:48:43 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x569582, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x252081, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz1\x00', {0x6}}}}, {{@ipv6={@private0, @private0, [0x0, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 'team_slave_0\x00', 'team0\x00', {0xff}, {0xff}, 0x3b, 0xe1, 0x5, 0x20}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/30) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0xda1e8a05dbb3402a) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:43 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x65, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:43 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 20:48:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x500000000000000) 20:48:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1f00}, 0x40) [ 1422.766965][T14541] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:43 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x66, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2000}, 0x40) 20:48:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2100}, 0x40) [ 1423.070776][T14562] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:44 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x67, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x3100}, 0x40) [ 1423.298403][T14573] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:46 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x68, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4000}, 0x40) 20:48:46 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0xc0040, 0x100) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000240)=0x8, 0x4) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:46 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x103503, 0x81) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendto$packet(r0, &(0x7f0000000180)="904f8b479af829aed06574c0d5f03d7d61ef7851081abd6c75161acc30bfd0ce700272e6e5e89a5b2c3cf79b4f4cb1ccf1776e14884cef5d1a76e79aed1d97cf6f5e6f5b5c8f6b0d8fb9f474f13a65c99ece1f4d4597599a174debd197610c49cc0a8370daa4bbc12afc298b16e6cfa2b1100c7d69c386c8d554d503f263508e6cfc01543c2883de795b920e32f554499d", 0x91, 0x44000, &(0x7f00000000c0)={0x11, 0xf8, 0x0, 0x1, 0x9e, 0x6, @remote}, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000240)={'batadv_slave_0\x00', {0x2, 0x4e21, @multicast1}}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 20:48:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x600000000000000) [ 1425.863295][T14601] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x400000}, 0x40) 20:48:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x69, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x80ffff}, 0x40) [ 1426.097490][T14625] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1000000}, 0x40) 20:48:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x2000000}, 0x40) 20:48:47 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="00000a000c0000000000000000f1a556fe9dcd7800", 0x15, 0x10000000}], 0x20, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1426.466557][T14640] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:49 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6b, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:49 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x3000000}, 0x40) 20:48:49 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x1, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b66fb000040dc", 0xa}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x2000, 0x0) sendmsg$qrtr(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2a, 0xffffffffffffffff, 0xffff7fff}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000600)="4258a8d654ec7ea84dd6677bf2680b62fe2436c0551ee86c0d324aaa61b8a7b7a1b657fb33b7c3fee8f7af02ef4817d818598c9140441ea62599fc5851565a7c7926bc93711588b181b45c89274a3ff5a6802232f83ffce851037eec62a8d0f70f6a86d22bdc37fa14d0f16405db2ca2f239ca9ac3d24a584a348592c98b2dcb2fa6941e65d77e56839b580081b007a8b48c0373b0f5a257dfa562e0b73550f26649b284ea0993d9415e9051544c31be0d57d8a1faefa19398cbe0eba84a1211871bb987d44a0e75abacfe6bb31a96b982679c560fa79f2b1e03fe0b815c53d7266c1b09bbb408fcc1203de9fc2ab872688ea2f55b485a1c69379454a4eb38a268975fbca1127a0a2816a681fb8dabe923a7d21a09fa2973a5f40e5c51813cb20b49847306d77717fb7b749b39ef673b9e8f9e072c60ab4518ba6d3ad9dbc192589f950e53a30aa3fa1279a83ad003e0ee0726c8d10baf8bc9bf9f093bc035b0065173df2f14092536285f1cfae7c5c342ba26939e2035d1ccacfd0f3f79bc900a29a6ec68cc9c5d2e348cb95dca566083528d05058bc923ac813825665efeb31b3aa486d0fa0ff16848c1511afe8736635f893b67b30f0355264a7f8af53937e7b5c1eb00a606350f70182c0ec1169d70077ff22b02b4adb6fef5868ee2190211c50356814cfbf2147519bda5850b50d197fc52ac4483b9f045f01bd661bc0530cf189a5072d0846e152d8430d9c9875b96699a1cc17688961dcc3f7cb7d4291d2b27eb7adb5e0c6c72d3c77259acbcc73b97669657062336878a98a58b0db98b75e304d7132598968ef69889315c8fee62906bc4620d823718d334315031463896de7ab54fb4fc61303b9271462333d43d12c9fe1781165781d2c0d4a19e667a9ab65a4a611e1ec97caeec575651d4e996bae6308673c1f62a8cdd10b746d0863fe6fe1a8d3c4bd8090a5f6fa553a5343e6c9dc6cde261f4e73523f9ebf597a0e932b5179fae24d3478a4f5ab7972c70b15084bd4aff506a9502e2b83c8c46440526e5caa95937480efe7736968bce8f1439b34c24a4db977656d1f2f5787299841ce75c401dc518819744680820ca5d0871128af10569504f00d6cf42ea51a2151e3de52b3722349589805a12715791ba8136931a067d0f6a7e5424c630d329e344521b9e54c843737086c35dfe75472d6b3e4d31308ed02ae39b83c2d3c4274d1e327e3f6c3698dd9acec1dc3955ed0bb1e875dfc359f16f8d8c14aef92f7c59b118a1762e7c92cc1d0caf3bdd3df518a1e2bbf6a737d836b688c818e9aa747fa40e8a3b2a6ed470d3c6ae139734d7ad08b70aca19050a78124520a5555af6a71e9bb1d0f2198953032f0bbfae3751c77dd0d54d717bd1d156cac91747a255179eb8515aa82d85f64e60ac0f9c0f98d10b2b7194cd06b8813364d5354aa708349b09ae5c160d2358c770cf7a2cdbd223bf849b6c4373eb6200223aa13f07801ef471b9902615d9697b0e97e5e05b58220749409ad8ee202a1b18637415821c941003838e0c1bf3292723da2f16026b2536f1979f58450e348f47e87f632e455fc7bbb11eb69fa3fdaf13754c4a2e5b91e83bf3f5c80353641d16859606578014f72cc4d4eb2fccc437ffe6c16ac06a13c04770a79965041c65c397bcf469b3d81d78f6e08e3dc5cfce40b925a8d70c05ea697097bd6186a7a40416e05ad0cbb628bd07bec77a36450a848c43d82a9808711cb232e74a9b5c14d8d1aa2528d10821c832f46b3af780bead211aec313810fece3fc51c9e5811d45e17f2df234f7fd026b8aedfa50fc3e0a30a29db7ee574d162d790bd0af4587cc05bc511cdc504d9d723499117ba76b25bd9d2ceb0b9d0a3b2bcb8e190aadc4b344a242c24607e08d2f39ad120fc1fa252aeee42a59755485d272869a39149fb1a1953a2b087880d9231b46470c6a679f74f084ac036b67252adb78806eea4d37e56609ded437acece662b17fd98dce47728f6ed9811014b8a46cb51fb9a4a195bc6179494a4af66dbe6c570ddd975a3282095323c961e176aaa266e5e67a96b51028ce9cf252b3769a9dccd553f217566e1503547db7d9f9d9dca17b8eac4d21e338572558349211293e1af7917b868c313afe71b4073eaddbed92b4470ae0887c60ac560b0dd1e880a6933f00f2bd88371af27b7d05736daf0d2b4ea1d220901496084d12604108232caaa475ef788877f0afd639443d5ae2594c462e911407b72217424c75788f40c64e56687f83cf743e734c5f66baa7966c1a08aa230847788f8954bd9335ff6b93e358dfc58bacb94452f74d4460ca8ff752850d3c6c8b3998f10cadf2b272be3d4cc616f6ab36b6437bbf60f4bc30f683f193828b4f447ec3e790a2c2204cf1853e64425c16ef38bdc1900b9daa1fd7a3f0a7e1168bc8ca784c3789b5edac98960c5125c17bde09e4dbb45600e662b5e71df21ba5c37fbfce7a8b65cd2a9637189fae47d21c4b9df9e46dd69439191ba2c47b3967c7b008008189af45dece0bd4d17f1143feec1ac6ee2d2659a468f1fc8cbba98b430ef63cb7ff36ef9153e98b84cea3028a79545218a1cda9721c3b5191445a373d05932a532cf6cb60b07a391cfbce3a7be61965f52ad35c626c7ba29033e785b5754ea230b8444c69163274567b04d83d48fa163777bbfaa963686774829e678191590a612f478ad1e30f1908de3c68622a186673fc99a82dde4e3c465773ebb9efd90905c1b75181db7a93a601657ca07a3362ee31160757f2cf782f6778e20dc87462e8da088c66cd2b2dfb0d0248a5f0c95f244fa2e0db187801167b3b6309513403c3affbf2fddcd56756e78fe9ed460f2ea7fb9b7a85df02fc384942f967d8ad07432ea8dd01f78572a0920293aa49c96b345afb90cc896072cab7f9a7f91f14e963d07fd9c04ef6bed1e0adb0d1a114099135b700d96b209b07036af0247db1bb7770e66fba9b4a564932cfe0c36e30819c173425693c9e1ced53f6aeb2f856c5cc0028a534e3131ee1a126a51dec90312dadbdb7ba18235db2f85d357841def25359d7fd02dc90031bea7216e00991f8d0aa6384d5c43c4b6f376f4070295c2fb8c07212377ea48c92bec707bb2e2e5c45552871f9183784ac40246dc42909bcb79bc45bf6b386a2c0ff3d048eb70cc75a262e7946f6b48db2f8497ed3ef89ca5bc24265639945b4c73d71e6a9cf94bfc334a4a833f460c70ae972df3e6c09f6cf5acdbbc7775431508aa569e890967e974ecc42ece9ab861a91b89e6c74c205a2be00e93d552f7cd3f08965760303e09dc9e1664c762614b0fd867130916f9e84f702e1a71083b0394ee5873bc27796195e152f88d63e0ec182aa87a0db7ec21b4b5d12f375016f8c0ea7f58addbf34e2e259dd1e36df9fca8b2c69a414195830549d4f1b9393a81c660ad7aedc93e7a420f34a093e3e21576621af1c7323e525d765c435500d59373d61eb36999f414a8c1cd47ea31134b08a347c7cf9d06f04999191982b9c9e0fb11851a6be3f312473967dbf6f2afb356f56be95e7c17df6a1b0f05c461fcd5bef60aba8ec560dc6f56a6033a1d58c0c4b192bc682c89a718a862683be9806d87056134961cef827d55215be96ef73a8d96ca3225d037f48afcb3310081796832cea6e8f25c3e65555aeebf1b55635e81f6392b6ba16c78089ccef4321ed8d0c30d773b73fb0178a206188b0aa0ccc098c484d5fd8c9bab4c22b17270e48dea0d41654d16a36a31d06dc29ac63f7dc2785b6a114afb7231562cc2a1c14e5b170784c0e1ab81dba8de75566ba4c2e9abb87563f4550881b689a90ade5438477641746f51d5d04c00c59fcdf00c37ceabd3ddc24d38d5f5b41733151b781c202d5e72f52690d2afe0cc2414ba9bb794f965ce6909375b0928b0c70a94a4f6236e5b78646c827e0a2285a2686c498918ef4cb2fe0c4f51c0ece3907a1eed83e783ad342d449f4df1dff99fc8f3ebb433446fcee2a3c432e8693fc3148c93539b072d5ddfb6a3f246d9567291229d495ca9eccabbe5e18f02fb8a7bb1285377a2d6359f60d525b69d9fc3531f0d3a3f8f8667f0005dfc1367f6257ec38f014db6d46aee620ede6476109811507f0c2846370696272c9937fd9612df0197ecbd0cbccb0eb2ca4188054ed06c918a0422996af06e98c9f8a56a2a180d90c874dfc57e9911e81f1bcf6a1797dba19841352560a1eaef7c09c2f201b597cf054023308f9553366f282b2424dab404f8897218c9df250c36682556b429a116cdf3d5395b59124956d376d54b38e4679d78870c99d0756a2b9fc1d06799e2e6be6c1e1d8bc56a6568a5446668aeb1d8655000cfef27f5fbfce1a53e3a7813b84aacb5942e56f4e84d87b84430a3a69f0a7e4307f2fd99473d33bbd1b1f466775584991f1aa0f7844aaa426b7151307eec45ac386688c85cc801af5db54825bb5af6bbac168cc925967aeb95e54b46d9acfef888436b352188de1659000c4b42510086917805ac7e1a88d89d53f0019e1ded4f1b8eb2043a1e6cae010eea9e60c3a9dcf35d7867aa0cc4f91d0c3131989a6940a05e431de7e6abb77ab639484e127ccf2032a20637062074f4c26f77319545bee6a8eaff64806a9a5c7a509d55c546e589204e9f07b8b843ce342a800dba8fdd80f1d1bc079e5e552d5ff543c2bcd6c0fe4d0e40c73ffcecc1960766d2f3f53bc9f16887b79e3e9bf87d9cc3cd5081702e2e611d1b8ccf91860a5f8dcd540241aef9fdbffe20a990e1f5f7ad3b4401a1b1626a6105c9bb3edd57545dd3c1df9c886bcd9e04d49c6a2f4f02cc4f6c6f2c30e59bb60dfb15f28e57551019a70f2aff1be46e6ce9c86354d4a960d36c009900b5a14aecc57a25efaf729e6edf9b5c2f7e43c19160a98ad327cea129f2948f26512d13d960d4094ec4610aab9b0339635a4e79c5a61f2cef438af4c199e81f150b4ca52bc54a21c712c78ac85a3ac20627c8ca33d03d1e0a06a2710f1d52517bb1b69dcaa6096fe92de6e12859e8e050798ee669ff5d236de741ba48819a555c1a02b9db236dc96cc43b96db04f2fc20a037fdbcd101eeed772dd66c131625ca5f449ef6e0c962bfd331a0bb57c299390d536d5383b22545b0ab755bc1293b9d080c4615d2977fdc19d95e4bb3cc0d3b82d8d48da58b8ba5763a3a1c3fe0fc274ed53307a91802d3dd00da31a06c3f1b57da97b3efa1532d076a0d5bc55da3595610cdbcf3a20d93f77b486b52b0078cfd4ee88720804cd7e416eaf3f278ba77d075c80b3ca315fc25584c8e6e9eccf6af1a8adbdb0f32bf96e91d64a256af4ff02373103f91b4123b8a64a1bf92706380416e2d0adca322d45e0adbc9e0cc3b0cd347e4bca9db71fb08408efc6d6ee02db5f1bb37540a7ed3cb47a5d136db3ec9e139f22ef87b2f9e18da55b2c23ab39f37eaa086dae87fa50d89a857d3122ec2a76f03dd45f5b15cef5e6bb1d2fccdb55fa91f617b26dc10708766023c4cba87ad5a260cc7805a7030b930ea9faa2d6ec413e57427c4ded15d9c1b2273ca5b49c2a01489914c21addd0d2e117baaed8fd58cd1454511806fa0ce2bb2109b6d7c75f5238280275e8c9438615d070c9c56160fee658483028aa5b68c6df4626af75e54b2425e5ea32b42e9acd28e0025456e799ca7a7d264fef1a7b9fd9bceb291652786f1ce9e8914a702c574cc55cb345e905dd9a2e689bb9b5dd1a159922505cb2d33a830cb539472cce97726104a7ecd65a88e477c023f9d31", 0x1000}], 0x1, &(0x7f0000001600)=[{0x1010, 0x3a, 0x9, "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"}], 0x1010, 0x20000801}, 0x38) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @loopback}, 0x119, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)='ip_vti0\x00', 0x3, 0x8, 0x7f}) 20:48:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x700000000000000) 20:48:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x4000000}, 0x40) [ 1429.008132][T14676] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x5000000}, 0x40) 20:48:50 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x6000000}, 0x40) 20:48:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x7000000}, 0x40) 20:48:50 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="ff", 0x1}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) rt_sigpending(&(0x7f0000000100), 0x8) [ 1429.428267][T14710] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x8000000}, 0x40) 20:48:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:53 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x9000000}, 0x40) 20:48:53 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0xc0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000140)) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xc, 0x501100) 20:48:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:53 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800000000000000) [ 1432.148210][T14747] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xa000000}, 0x40) 20:48:53 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xb000000}, 0x40) [ 1432.421017][T14780] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:53 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6f, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:53 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x70, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xc000000}, 0x40) [ 1432.609695][T14791] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:56 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x3) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xfeff}, 0x8) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:48:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xd000000}, 0x40) 20:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x71, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x806000000000000) 20:48:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000100)={0x8, 0x7, 0x1f}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x4e21, @local}}) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) socket$inet_udp(0x2, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRESOCT, @ANYRESOCT], 0x2e) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000380)={0x0, &(0x7f0000000340)="36607db91d1eb82a2c07ae273e380162298c73cc", 0x14}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000001c0)=""/235, 0xeb) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:48:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xe000000}, 0x40) [ 1435.231553][T14816] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x72, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xf000000}, 0x40) [ 1435.532418][T14838] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x10000000}, 0x40) 20:48:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x73, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:56 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x6000, 0x0) mq_timedsend(r0, &(0x7f00000001c0)="9137f4069d3ec2c420ec1f1a232b74db060c9a542901f68f132749dfc4aa4493f822dc2932ade01a0bcf4bcc1b5e68344c90c520c2530df5fa7f43154134e6961038f2c20d20424d09f35b9ee7133dec15ec532d543fcd16758419dac455ffe0dd4bc0bfd1a13136ca9e51a2a376ba23e9796ec09327989efa8552886529024adedad9e00b54ceaeb6821e32a0bbffcf1909cfeddf9edf149708659e0529866f54c578ebd0c8f9d6c1630ed0ad86ac4952430c61a6e830e15b6bb5ace61f53337145a1074aec68e441b0e6bd156ca8ce8fff0357a32aaee4f9a39fdf97f8b1ea81c53c76a027875d0f2e0b4a7cba78724a9bf9302dedb4", 0xf7, 0x200, &(0x7f0000000140)={0x0, 0x3938700}) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1435.833976][T14855] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:48:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x11000000}, 0x40) 20:48:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x74, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:59 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x8000}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0xaaaac5a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad12b83c000040d2", 0xa, 0x200000002}], 0x81209a, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) 20:48:59 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x820000000000000) 20:48:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x12000000}, 0x40) [ 1438.363955][T14879] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x75, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:48:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x13000000}, 0x40) 20:48:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) [ 1438.693683][T14898] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:48:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x14000000}, 0x40) 20:48:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x76, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:48:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:48:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x15000000}, 0x40) [ 1438.989430][T14915] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:00 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x16000000}, 0x40) 20:49:00 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x3}, 0x0, @in6=@loopback}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa, 0x5}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000007010400000000000000000000000a0c00064000000000000000000c00034000000000000000010c00024000000000000000070900010073797a31000000001c0007800800024080000001080002400000000308000140000000000c0006400000000100000001d542e6970a91d0555faff28c0e31a3a3d429d965216b49"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 20:49:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xd00000000000000) 20:49:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x77, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x17000000}, 0x40) 20:49:01 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000000c0)={r1, 0x3, 0x5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x40, 0x9, 0x3, 0x40, 0x22, 0x6, &(0x7f0000000200)="b056cca058d632e7d404b0d6b0c68ea19620e8711a05fed3d43db28c961dd83eb7bb"}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 20:49:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x18000000}, 0x40) [ 1440.053166][T14945] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x78, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x19000000}, 0x40) [ 1440.407344][T14979] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1a000000}, 0x40) 20:49:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:01 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = socket(0x22, 0x5, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x5e, 0x0, 0x2, 0x6, 0x100}, 0x20) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:02 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1000000000000000) 20:49:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x79, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1b000000}, 0x40) 20:49:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200), 0x3, 0x4}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1441.588065][T15024] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1c000000}, 0x40) 20:49:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:49:03 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1d000000}, 0x40) 20:49:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 1442.053453][T15061] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:03 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2000000000, 0x2}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000}, {{@in=@loopback, 0x4d3}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0xa9}}, 0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x40000000ffc00040, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="04000000eca40000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x4) close(r3) r4 = open(&(0x7f0000002000)='./bus\x00', 0x44042, 0x0) ftruncate(r4, 0x2008002) sendfile(r3, r4, 0x0, 0x200fff) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x108) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) fchdir(0xffffffffffffffff) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000100)) [ 1442.400151][ T29] audit: type=1800 audit(1594154943.459:6384): pid=15077 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16954 res=0 [ 1442.735184][ T29] audit: type=1804 audit(1594154943.799:6385): pid=15081 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir006103304/syzkaller.YwtG1u/621/bus" dev="sda1" ino=16954 res=1 20:49:04 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1400000000000000) 20:49:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7b, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1e000000}, 0x40) 20:49:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:49:04 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x1f000000}, 0x40) [ 1443.302463][T15095] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x20000000}, 0x40) 20:49:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x21000000}, 0x40) 20:49:04 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:04 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000400)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@llc={0x4, {@snap={0x0, 0xa8, "94fd", '\x00', 0x8100, "5c49ffc8f9d462a8b8c03ed0dcdbf0c180e306f7fa8292ed6cb0b1aaf036e5b05399164e33f6d0a3acda23c0af888a1f7d9e4b8f33929b852f04a8ee1ed069c254a3aa9e7b9dadfaf334af5a88dcadbf647cdc4823bafda7862ac56588930d74a33a87ea2f"}}}}}}, 0x80) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r6, 0x10, &(0x7f0000000180)={&(0x7f0000000300)=""/166, 0xa6}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x9ec, 0x4) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r7, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, [], 0x1}, 0xffffffff}, {0xa, 0x4e20, 0xc0, @private1={0xfc, 0x1, [], 0x1}, 0x53}, 0x2, [0x0, 0x884f, 0x401, 0x7, 0x97, 0x4, 0x7, 0x4]}, 0x5c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r5, 0x40044103, &(0x7f0000000140)=0x1f) 20:49:04 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x31000000}, 0x40) [ 1443.956923][ T29] audit: type=1804 audit(1594154945.019:6386): pid=15080 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir006103304/syzkaller.YwtG1u/621/bus" dev="sda1" ino=16954 res=1 [ 1444.015141][ T29] audit: type=1800 audit(1594154945.079:6388): pid=15081 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16954 res=0 [ 1444.037515][ T29] audit: type=1804 audit(1594154945.049:6387): pid=15082 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir006103304/syzkaller.YwtG1u/621/bus" dev="sda1" ino=16954 res=1 [ 1444.064349][ T29] audit: type=1800 audit(1594154945.099:6389): pid=15080 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16954 res=0 [ 1444.085989][ T29] audit: type=1800 audit(1594154945.099:6390): pid=15082 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16954 res=0 20:49:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7c, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1c00000000000000) 20:49:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xe4ffffff}, 0x40) 20:49:05 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:05 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4251be01}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in6=@loopback, 0x4d2}, 0x0, @in6=@mcast2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) r3 = socket(0x11, 0x800000003, 0x0) fstat(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000240)='./file0/file0\x00', 0x8001, 0x1, &(0x7f0000000280)=[{&(0x7f0000000400)="ad12b7e4c1fe8359aeee3e18419b9c863915075bfbd5d3cde19a23d5250230ea0555f4863655225652da3223e70e82d5de036fc7e67c709fd126e9cdf6323338b0f0d690703526fbc8cad20547e7181d6867b936c27d0effb3c849f07682fb0f658863f85ec2908fe22ff432e14a7a4f2c06afbb867aff729408f509e4e8ea3c42b54fa5f9a9f3df55c934e9aa4429b1395d8cc840075eaa005e898307b5a757f5a1fddad9c87dc5dc0d2d1e64e6d6e8f376e407743f7758762bfa7783fcbcaf861c7c09a8a1928b5c0f83174639ab2ffb00522ff1faeef73b93409d71b328573cab7d01b7925b1eec2e981ca3ff126940af9ef18dd0f640a9fbee", 0xfb, 0x8}], 0x0, &(0x7f0000000600)={[{@usrjquota='usrjquota='}, {@mblk_io_submit='mblk_io_submit'}, {@noload='noload'}, {@dax='dax'}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}], [{@pcr={'pcr', 0x3d, 0x18}}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r2}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '-/\x84\\*::\xd2#('}}, {@obj_type={'obj_type', 0x3d, '-'}}, {@smackfshat={'smackfshat', 0x3d, 'bfs\x00'}}, {@obj_user={'obj_user', 0x3d, 'bfs\x00'}}]}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) renameat(r0, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000140)='./file0/file0\x00') chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1444.338469][T15141] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xffff8000}, 0x40) 20:49:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xffffffe4}, 0x40) [ 1444.791536][T15174] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:49:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x3f00000000000000) 20:49:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 20:49:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1446.084979][T15217] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 20:49:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) [ 1446.524744][T15239] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:08 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0xc70}, 0x8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x43e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:08 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4000000000000000) 20:49:08 executing program 4: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x34, r3, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x40004) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000001780)={0x81, 0xfffffffffffffffc, 0x4, 0x31, 0x3ed, 0x3}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) recvmsg$can_bcm(r0, &(0x7f0000001740)={&(0x7f0000000100)=@tipc, 0x80, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/17, 0x11}, {&(0x7f0000000540)=""/69, 0x45}], 0x7, &(0x7f0000001680)=""/152, 0x98}, 0x40010020) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x40) 20:49:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1447.647249][T15259] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x40) 20:49:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x43f, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x40) [ 1447.925269][T15285] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x440, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1448.206479][T15305] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffffffffff00, 0x580c1) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f0000000180)={0x1, 0xc, [0x9, 0xfff, 0x2]}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) splice(r0, 0x0, r6, 0x0, 0x12003, 0x0) 20:49:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x40) 20:49:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x441, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x4305000000000000) 20:49:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:10 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x30}}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x214042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r2, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x4000) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x9}, 0x40) [ 1449.263143][T15325] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x442, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xa}, 0x40) 20:49:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:49:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1449.669998][T15357] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random="f62fcad900", @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x40) 20:49:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x443, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:11 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@md0='/dev/md0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='debugfs\x00', 0x10, &(0x7f0000000200)='bfs\x00') 20:49:11 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6000000000000000) 20:49:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xc}, 0x40) 20:49:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1450.815729][T15392] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x444, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x40) [ 1451.168065][T15423] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:13 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) sendmsg$AUDIT_USER(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x3ed, 0xb00, 0x70bd2b, 0x25dfdbfb, "b7cde8c868a62e2771e24348cce02bfc3e07423fbc33f950371a82a27a24a2572009c4a9c911f6c51b6af58e835fc423506b3dbe56f9254b45cb7ab25a3379352c", ["", "", "", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x24040014}, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xe}, 0x40) 20:49:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x445, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:13 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101a40, 0x0) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000001c0)=""/208, 0xd0, 0x5, 0xff, 0x624, 0xea15, 0x1000}}, 0x120) 20:49:13 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x6558000000000000) 20:49:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf}, 0x40) [ 1452.406148][T15460] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x446, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x40) 20:49:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1452.808021][T15493] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x7, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x40) 20:49:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x447, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:14 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$TCGETS(r0, 0x5401, &(0x7f00000002c0)) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000440)="8467aeb56b2bcb7127b332a5a666c34672cd64ea427cde48fabdf29d9262b76204b724c190bff57eca9a3228203f7d1a52ed823aab959236fd0dca6df0367fa5872066bd9f665c9b04a3288d2bb7c569c52cfc63ec615eb1d1cd9f2cb7ba40ac43ab4f6558c4f00ec30cc1f2cb090972c7ec0ca9293b8ac077adcfcd2c722fd330b50e8f60a7b0aede8bf36449cbd8b2f2c1fbd8e6eab1a73bd63c9ffda6eb1e61c051ff7b46549bf5bd0aca067720c3685051191ef1625e52a1f87b0a2d0c581c0ac907c3469c3ec6f14ce1", 0xcc, 0xff}], 0x48010, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/155, 0x9b) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) unlinkat(r1, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x121401, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) mkdirat(r2, &(0x7f0000000400)='./file0\x00', 0x150) 20:49:15 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x800e000000000000) 20:49:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x12}, 0x40) 20:49:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x13}, 0x40) [ 1453.977531][T15524] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x448, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x14}, 0x40) 20:49:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x15}, 0x40) 20:49:15 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty, 0x0, 0x0, 0x3}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1454.377586][T15556] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x16}, 0x40) 20:49:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x449, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1455.365763][T15575] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x4000, &(0x7f00000001c0)=[{&(0x7f0000000300)="1400000013000507ed008064d60010003d000080", 0x14}, {0x0}], 0x2}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:17 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r6, 0x600, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1490}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048000}, 0x4006) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xb0, 0x0, 0x1, 0x302, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2402}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x54fb, 0x9c72, 0x4000000, 0x8]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x11}, 0x14) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x2}, @void, @eth={@random="4b0800000f00", @local, @void, {@ipv4={0x800, @generic={{0x16, 0x4, 0x2, 0x6, 0xbc, 0x65, 0x0, 0x3, 0x11, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x27, 0x29, [@private=0xa010100, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}]}, @ssrr={0x89, 0x17, 0xdc, [@rand_addr=0x64010100, @private=0xe, @dev={0xac, 0x14, 0x14, 0x3c}, @empty, @multicast1]}, @noop, @end, @noop]}}, "ac08a56cc7261bac35ec70436c3fd66792b723613869fae3c800f0d9d74f95bbb4b0da11eaf49f589e50f6625361d76f57eb31366bdf55f10fe48979897e16ff1d20765ec0232842e16248637642d94c1318514f7ba1ae2f64bd04ab0a55fbf1c4867fc1"}}}}}, 0xce) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0x8) 20:49:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x17}, 0x40) 20:49:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x44a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8035000000000000) 20:49:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x40) [ 1456.977584][T15598] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x44b, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x19}, 0x40) 20:49:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x44c, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1457.255213][T15621] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1a}, 0x40) 20:49:18 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) bind$packet(r0, &(0x7f0000000100)={0x11, 0x8, r3, 0x1, 0x59, 0x6, @broadcast}, 0x14) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1457.459091][T15630] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) [ 1458.319712][T15639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1458.399715][T15653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:49:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:20 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x44d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1b}, 0x40) 20:49:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x8a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:20 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8100000000000000) 20:49:20 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x1, 0x0, 0x2}}, {{@in=@rand_addr=0x64010101}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x180) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000100)={0x5, 0x4, 0x2}) 20:49:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1c}, 0x40) [ 1460.091053][T15668] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:21 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x46c, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1d}, 0x40) 20:49:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1e}, 0x40) 20:49:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) [ 1460.353549][T15692] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:21 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x46d, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1460.567516][T15706] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x31}, 0x40) 20:49:24 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x42f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x0, 0x1, {0x9, 0x21, 0x9, 0x9b, 0x1, {0x22, 0x740}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x7f, 0x3f}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x5, 0xe8, 0x9, 0xff, 0x3}, 0x11f, &(0x7f00000001c0)={0x5, 0xf, 0x11f, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "8e8fbb12fda681856e3f9326f0495442"}, @generic={0xe9, 0x10, 0x2, "12696b82ce3d1545d308c73f6a843ff8954e17498f2fcb1dd12297827adacd3f1442d0df13f8b28a01e8f6d12733b2258e7b3d471fb240f71ab5231016ae5a5e2ffaf1255267c289869e823c9530527bdbe722e1d829f431c1f1b99de4b64a06c1e8bbfbd948a7f4478d2ae18221f7f4e87073739dcd37a743600c33e9abb958aad7f3121a6450264b2192f8ff413fe2318c4427fe7996dc0798953d8d3f667467a77f98c10bee25ec9a8926b7f4d178d736db8bbf63f7a32bf84b6af8fb7961bcd94ce496b3540e9301587c9e419ef767fe05655d68645cf2be6c6bef804471106b809a466d"}, @ssp_cap={0x10, 0x10, 0xa, 0xa7, 0x1, 0x7fffffc, 0xf, 0x8, [0xff0000]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x5, 0x1, 0xfff}]}, 0x7, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc1a}}, {0x52, &(0x7f0000000440)=@string={0x52, 0x3, "621c01d1d28cb28b500f975d416a0b2402064f3c56faf78fa8bcecb36124bbbbbdee4e519ce5136f425772d94feb750f09aa46a96f557eb015a7dbbae2fec740d0e4a80d431e7a7facb7d12eb455e57d"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x860}}, {0x15, &(0x7f0000000540)=@string={0x15, 0x3, "180651deb0f32885d2e04707beb10b31cccb30"}}, {0x1e, &(0x7f0000000580)=@string={0x1e, 0x3, "67850ccac315add0554f89d9b338d7018364b7b171e81fb0be8c62d5"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}]}) 20:49:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x46e, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:24 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00', {0x7, 0x4e21, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa080072a4299c070f6a8e6cc2b638c64500001c0000040000029078000000"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x86ddffff00000000) 20:49:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x300}, 0x40) 20:49:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x500}, 0x40) [ 1463.149153][T15725] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x46f, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x600}, 0x40) [ 1463.445500][T15752] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x700}, 0x40) 20:49:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x470, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1463.727641][T15762] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x900}, 0x40) 20:49:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x471, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:27 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x50810, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x6100, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./bus\x00', 0x1) syncfs(0xffffffffffffffff) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) 20:49:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8847000000000000) 20:49:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000b000000280812000900010076657478"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000400)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000140)=0xfffffe86) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x90000, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x810) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="f500324d8960da6f27303bf90c0000005b9c7db3b169042a5f72967200aaaaaaaaaaaa080045008a4564f6fb60a826ce79e8f21936051c000004000002907800000000"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xa00}, 0x40) [ 1466.277142][T15788] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x472, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xb00}, 0x40) 20:49:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xc00}, 0x40) [ 1466.608914][T15813] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xd00}, 0x40) 20:49:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x473, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1466.901105][T15829] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xe00}, 0x40) 20:49:30 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xcb, 0x29, 0x2, {0x1ff, [{{0x20, 0x4, 0x8}, 0x5, 0x7, 0x7, './file0'}, {{0x1, 0x4}, 0x8, 0xff, 0x7, './file0'}, {{0x80, 0x3, 0x1}, 0x1, 0xff, 0xd, './file0/file0'}, {{0x1, 0x2}, 0x1000, 0x0, 0x7, './file0'}, {{0x2, 0x4}, 0x1, 0x5, 0x7, './file0'}, {{0x10, 0x4, 0x3}, 0x0, 0x4, 0x7, './file0'}]}}, 0xcb) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./bus\x00', 0x9, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000400)="f3a1666e2346ff5bd248fe25b61831eebfad6022ef3c7fdea10365e37aafb8f5cc6b6683638bcdce43e13b8fec45955d69f82198a73713576d2eca0d0f228b4954623924eee6e1810f0633739be3d95b6c539ad3b57fbe6c0e", 0x59, 0x7}, {&(0x7f0000000480)="e46b471ef7b4aa531a5283ddfba3f662f5fc8edd0073c5bcc235fe04a21d2473effbc3434efc62f81a63f650aa999a8ad3e4b7df53aae1adb6a82059e55f3687ba9d4bbc70c33d5bca893afb2fa01b66ec7acd0f0ac1d90bbf45b4f7904f515e6ff50b1513f6e5f46bdbbc2bfd49aa28244ed5f0e6afda7782a7b40223b2c08576b8e32768a3af1fb4687c79983a1523c62db7ecd7cbdcf9313727e208b9e4b9ed2d5f91641b4a9d10dbc8662d593011fcafbd76411f74b6b5caca8eff24525203283a12655d4ff087a682939eca9c05aa991a5cc02b3e311e85d0", 0xdb, 0x7}], 0x2000, &(0x7f0000000580)={[], [{@context={'context', 0x3d, 'user_u'}}]}) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f0000000600)='/dev/video#\x00', 0xffffffffffffffe4, 0x100) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x474, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8848000000000000) 20:49:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000140)={@dev, @remote, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0x5}, {0x4, 0x10}, {0x0, 0x10}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008004}, 0x40) close(r2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000004b080000000008004500001c00000400000290780000000000000000000090787f000001000000000000a97e78136b26b2e4b9b22b90a2d9d607f77842c2cc6aeccc1a013e00a8cf559d1ebf323c65622d057c518734b251584ae63983787ab643808fd79d90d514b990467f210b37c38345e42dded76f8e1a7f0906"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf00}, 0x40) [ 1469.310314][T15851] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x475, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1100}, 0x40) 20:49:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1200}, 0x40) 20:49:30 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000100)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000240)={&(0x7f0000000140), &(0x7f0000000200)=""/45, 0x2d}) [ 1469.646507][T15882] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1300}, 0x40) [ 1471.435162][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 20:49:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x476, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1400}, 0x40) 20:49:33 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001b80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1c4, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x224}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xc25c}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x197}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb86c}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x73c}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7fff}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x3e}, {0x8, 0x13, 0xdf0}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) lsetxattr$trusted_overlay_opaque(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='trusted.overlay.opaque\x00', &(0x7f00000018c0)='y\x00', 0x2, 0x3) syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000140)='./file0\x00', 0x2e8c, 0x8, &(0x7f0000001780)=[{&(0x7f00000001c0)="2cda9cc72d08cb5028c6dc94c828e91b2c8279300248b2a45db26be299334013bc2bc21b486315a2886079d9c69f45098507", 0x32, 0xa8b3}, {&(0x7f0000000200)="141d25848103eae237776bb2851413b3b377ca68a7c917ddb2196c87bf52bfde76e09415370082b0f2a49f25605ba3e867a4d90a4193ebeddcf9e06241afdec0e17e7bcf0a5cb79abe70576670b52bdcb0cd0c7f0f52f37ea711894879196be9e29d82db1b573a23f8af3bbfbdd454235eb3c17b883f5b5c2c1ddeb3ff97ef39908a582ca588e932fbe49aa2bc6b80ef8506e7033201cead7a6e96a23ff2b9c1a2970a2067758117b7a3b395d40d92112c98134fc214", 0xb6, 0xdca}, {&(0x7f0000000400)="030c939bb67fdf0e735dfd4fa1a0aa315ba18f7bfeef8b8be03e075fccb7571886cd0b43b54b8aaa948310f9851b6d741071523c1433aea6fe79e62770a188c8b14694d94dca1c827508ae78857d6faeca457c868ab9560a95a64439d352a3dee100bb51ff7cdfeed56ccba1dc27e71c3e0e05ddc19d6762d8d892b958552bd9fbc6a062ca1712fabbd432bc02d4be44a973624d9d3c791d236bda27e75f56c6bbb49aca4c79587cac2640ebb5e9d2c729", 0xb1, 0x2}, {&(0x7f00000002c0)="1835a36a4c07e3dcd8fe1cd7f5ff98d1a0ea7a7c386922f003ea8b", 0x1b, 0x4}, {&(0x7f0000000600)="830cf7dbc2a80dd0d717d639ad08d77a3ea53baa2b0a6b2581bb9b9c71c79c840dff7679de925866f9882215910437194cbb4d9901b7dd5956368beffe0e33fb9f6ff81f72bc004aec3e79bc80d378e58e1f869f4956794e758a287164ee0a7094029bebb86ba263ba4e7e12ac24b19216c5d18a5b3979c6bd2606145dfa9ae16ac125dd19a8e0f61f194eb7c2225bbd6c20cd9b7b8df90e82348201c59293321f3784765a2830fa3ac8f809017d0560390c921ff470e380cd56ae635ea08a10aa57f5b8e8dc692ef566377f73f189d5f0ee3a9b12ce91245b64e22a2c71e934e693ab9360b35c3ff2b5ef920716ba3e95ff0e356e87b6e23fb0c2e2dc91b1032c295af84ba06bd2f4e833e301c7c0ea373837d48b8fb58ce02a0b54e1be911ff35811258dc98c4641d9f5be9520025b41e15499d79254d3ee39e47f41afe3eb19e4ab87298b100affdf1fbeeae3a9d5b80af0e8a478a4037dee0c2636ee691b2581d84742e0609ab6ea0b402907a19f45a195ac17507ef126ce0591cfac40bc77ab74263b5f450d6273a6e523d15798300b61cf0e744a70711d09da43a260621d38d825b4015b0552377f0dac5a15a42ca452f2ea6b9982374ffba7b000f6eb87aaae1be8a5b777591b20cae5d3a839892fd56467b321e6b47f1f8e890997cd0ec341de79f4ce4c765be0c11901deb5d6c2ba92b09ec2611db35357f4dfef4df7ee543a0e6a4d564509c7d4dd9766e4bf2ffe193cf414ce209125ac0024329b111f978e9a47444f562da363d18ee5d20ba841e4ecb68441b422ee67d9ad56a6c68ee83776b09070abe4397c50e2995d67514dcd772c769b86482276266eaa2ce1afe6b290b2487b1a5328ba2e0e69a8c0612b0351ae06e25651867d07c58bae9fbb1a743e70b7787a49e3979507c58d78c54575dd19b89c43ed63a4f456ccf708292bd38c0ebf36aeeada8aaebb88ef82a3d8227b2e50d08f7ba9e4fbb7caa9a7c7900a5d8cce53d1b661a8cb62930cb059340954616c749e602f7ec580b512faaf0cee0d48aa40ff0237e1b0e5c604eedc5fbc6b73035180f95da653ad34fdec5a3815bae099fd2a16bd54d5f93f29598a0d49aaf1ea1bacf36d267567a8103cb4e8e7f6a6230a345710989d8afa238a4bbbaa5d2b6c9fb33857d0d5bac2cb65b63ba19748f576f6a3b4f57d94ebeba6d4c457bf2c92cf216dc6150e01e5c687c249986de3ff6a83b92b243de758e16519847242453e29a526a70978c02d5c00d286b8ccdef547bc4b101b9e0a20cd90f455f2069244a6b15ec8254678f2de71234d6f01ed23b77b63ab4e879d2c8502f811cf4b30113c24bb11117917d7ae705aea1b02dcc907ba9bbbd2eb9c570f4a3c73a85bdb7ef521d64730540c1e0ab8247f70699a6ecee84445534f1c18e61e5b7e1b6258b81b5e09dd7a841147e43dc70213bec7785689ff060900685160a23f4c23805463d04c26bd6e55cbe5c6d407a6f5ef62684436cdbe52f91ea1324011184f9a178cd78954e59aa2355809e6cb2a359f2c77e3fb94f971d1b36f988e2049eb4059aa122949fba9d56ce1e3dafa0fd3c10d83d8d9e842a4ad74e6a4f585dc868d82b11ffca9662c4970826901fda81eba86959556498979985d92380442b6726f501fa969aab3e9c9f4b1e75c792bcba29603ef8aeadb1807e0d65a30bef1c49b7789aa009ed9d2bc32ca0e34e8aba18194ac2c8f4d75401fe2bf970f9c5e3cc908be1f594118c297774bf6cb64b0b2191253f93e046edd381a9997d0fe9a5d8a2137b2bc4be83aaa1c14200f492e0b29228e670638938b360d00c98716e97d420e9707d132e301c0ca12f9283349aab04fa73486adce88d0e8d8961f0811fb575bd607a4664b83d3af309be14dff269845588cdac135967f683a46e6468796a8a37df8dc583a4d1e06b15cf2c73504ccd956d428e79ed0a314963a6ee743b9c4ac282fcb460eb70c56852259dd6dd22cb08ce6770d4204b743930cb5bca70549262649ceae195f335a29f8ef40e34dba64c7154c1ea0307eb5e057bc20d0ebf73466245d5100e91aeda65d1c7a575fa89be20d632cc317b915142f27b85bede7c0bd51523756ee014c3ec06995552b1bbe4f7a6b695db6cdb845dcea2057b6445eb80557072ab4552af80abb1d6d9b4badd9b215679970d8d6a1161920197a3c3b5eb32218490ca30dbb71247231ec590b1652a28c04cf9e17da5c359bdca4862f44c80bcede2294eff391bb9f797a96c629bf4beab99ba0ec954ff66068627e5060b795b73bbaa7c74c780ee85a465d20f906f7e2613ab57067549b3febb5582fa9a2fae555f39c88db6a4215dd321c2df05ffd8a9908d5ad88c633712d08e9b988163a5da8e4390f4d7ad8dff14731c10921ddc81feb13a3f2b718382c23a76576f15f48c7759d5f98ba51cbf492f87a0c3f0da0f5ad5d00929ce3f800e5e15abbdfb6ca580c873c7f152cd0d715747d55149bdcb0ee4b948543022007c47c3a67b9251e5327aa7e9fa15516ebf94d484e42ef321f32942c8428c9ace20913d558d951ef3a56a2a2e5d6ffc5c29b0ee868ee00985969ee63a5ca0d83affaf4182b6f94bb4f9c47e90ea6c1e64df5b7d92883cd79ab163c2e86c38f55fd039ccd78e60b332463b7b50da598256c92840db767ef294371c7a791d48ef8659c54f528ca39dbe32205c7698f88e5ea9b05ff633050c96e25dc751efb725310358ef33494c5480e6cb806486a133397c54d424663d770f3284c745633c05f7599eaafb9e57918153df2c500e57f4d3df8fdfd399fd8fd196b8a339a07a29585b93e21aad8851c570104e322eb7950ca2d966d4033ecf8ce10501b4935d1d4d5213c9ac624c2b53be449748c7583e66dc2294350b4d8c54ed1dc8ad55bc22501e22db36cab93f01c391f3b8aa1a2200b8ba4f5e2bb051407f46bb6d10c8f5ab3aa5bcc3abb2657865bb62d230e5f63aecab9449396d8f2711c558cc5f9c6189d92536fdf808af72d0140353841e1fcf048b176808e4da4a4fc3a59cb27c6b1a0a8cde3c0da803935e67f8318b646c0e4bfa86a47cb573dab813ae0249e2b648a70cb49c86efe2eec0315cf06d99beccea6fbb8b2807e7fe3ae594e553fca7c951516aef9db1a132a9aef99ec641b1aa6d3bae4b6b1c7db53cbad5a199b256a039527a6a034852ef1b6f3669ddd1c80c8a1e62e80a7631f242dae8ca9565da758b4e71e837a9194dc081f9e952115c31b07e245bca4ece2a14e883b2ca4adb00a1428a034affda03bec3075452627b6b8fa5d3af2794b899e793ab2d76d99a306ece560d499865e218e30ebccfddd66702727b1e1d597d746d2ef3b70252f67272b0520feb8b52b191b9af52e1a0fb111eadaa1b1cfb3aa2ac22dc55e01edc405041d094fd17e88fb469e1f2fcbec884caf9035d2c173daa32449244d2639f6bbd8d8d4dadc86a6daf36b4886e6857959414af3cd96e7a94429319b93962f98ef6b73749ebdb3a2e39b6366f3ee65370e1a22ce16e9045e84f242816e7a5d81b7fbc8e3afef8dabfd589217eaa2810f0508958bd7f0fef354cd2b126110302cb556941bc246f0718cdd34f7f7bd89f56ca6f72d815beb84bc297c76d155818a5d06b69b2b35bc022093148921abf2eba80712623f0dad160bc51fcb7ce7bcac6ff71b07137895a38aa25d5d9e51be64d09c5a2693c192546f72aa79209dd2b287acc2eed5a48bd3bb8f467bb0f30b9c2a506e55d4d67e04fdf5a66f51f14011943f9d474d45bfcfe44afdb7660122f84faaf900c555e6857c67fd702cbf269f33a87ccaf0f819f93559516c33ad89e8c0741d6b6bb2cef8c22f7f30414dfe220cadb12974588e15ab855f6add749220e0a1e1f302ec62579f1ef42f8db9a005dfdbfde3a896233a4404755b37b53b4141606510af062c382c3739b7b516060b80d1525ef9d51eeaf6699d32ecfdfdffd3b10e469b41c6d420e52b8a36c2391e0b8354f1099c6e161facc368daed70275e17eb6c4df3100fcdceed2d244615f681d0aeb297c43b9fcdfe2bbda89867844d56259baf7798bad1392f06b3fbf81719b8bbdea124556e5c8e103f9a3561eeb96af27e92c2862c2244cb73205ea415b152f0a305d276b9f02e6beb9678a8f90bf27a90c199ce5d491efcd42500a428e5340bce994bb40714ad52c96e092696c75b5a5da088cf60cc2494c1926215b113c5951b2320dee8145c25ae4b51fe100ce74e63f82702b8d7d84abd6cca389824feaa31c581745d9e3e3e24fb7a42ecb47011d0a51c71c65e8d28c38171abf61a193440ec35ac072b977fc09d3b8f5f4dcac520f4e17f6314280530c81b95ec6a4625ad034fe4a96f834c1e789bf947382e516ada0efaf308622d32e3386f272226fb9a5bda9e0e6860e5d7cfa6561bff165b85a295b7906cf9118dced9c41ddbe172e8e29fe82497053026c33cf065bd11e53d398ca91298d804e1941bc0bef570061db44fc4a6bf36cded1f12494c1dc3b430b0b2e8817f10f9e7d3532418f027fa8e09573c5900a67b9a26e46575c53f5b9e8f2b9f2379be27736740bcad43894930012b5c8bf013a045b59dff3f02821b6af1a224dcdebacc76a08c639350aa2e9ba8b8f7e602d590b1be8fc388431efe6f87ab06f1c59caf6ae321197695303b02c8bf16a61faffa5c700b5a6b6a37849ff3bb2e6e37abc8c10d9c5d9c0cfef4397882f72ae97392e2a55b3b758e4c3a289966a783c864b3d9d818a1d8233611fa01fe483ff77ebe65e71e79b0888836aaa18812cb45a2179beed6b2d7ec5174555bc180aef90a2bfd8acbd998ceea270e2aa874080ac28f67e8fd5bfce81202eed9a7a2c9bf5c40dfcf05431ed5e0dc5311c55f9174ad64f2343509cb1dcb764bf5ec51b680abcea27f3bd7716f16c3a905a2120d9330ad2f961efb7f2d801dfcc3e59afcb289fdc1a8c82e76183508dbf287577fd0bb86c0a459b3b092f325203c675b150a49a663ef48866f85ca3bf03477164005feaab6b163b7a9bd4eec97bb3bb31a9e17661d7409b8e1d1ef8edb8b981fe2cbb4718cbe85bd6e31ff52a8bfd2a342cb5c5a14130cad6a835b61ec617a3acf033330feaddef35f74387d00a90dc446c20688ae531b0555483506b71672c5a7cd204140d7921493c9bcc823e04d8f3e63c562b5d67d36ffa1b1726936da2594d6fe3bf4191fb744dff3972b5e0e52e38c56e10702e145942a3a7cddfdd49bab2ced8e23173e2d6545d17b382dafd3c8f1598534998a5108e1785019e1ac7cbeaf92389c7b4458b353e2ffa549eec6a913c356716b8784b99013bd57886df833d5b76b92dd688723e61e53bc2bb72e17b69da8a5d3eea6d1744623d6d225e9db2504307ab6146176978059454771d116e78199d09a17d97de918ed7cc35b5f2cd8c58acd5d30b7fb6a1a208f07e8230ff56cfa262abdc5bff04c69434ae4ae81fd97d3faa1779ffd14b2f70aa558613da494e5ef8d7166367d72a804abaffe89e271706bd06d929a868337cf762d19e457c77cb24b32fd7fca4e5cbbde0ebcc7ea2b876f51331a43fe95ebeaeb2e050e0768e0e04f54954690191c309206921a484030ba20a4ba68cb3b347ddb4514922aea52754291eeb5ed7c7b1cc0407b186a09f4730a4b613d5a56cdacda615b76c9db8fc36754dc279d7bf1294ebdf6d06ca22b3f6ec7836dcb920297ff2b37b78f15963b9720875d04c37164818a49a2c41a90dddadcb9c39cea9218c324db6a86f3a6afb58d", 0x1000, 0x80}, {&(0x7f00000004c0)="644694b02fef959607fd0714b0615e5711b6d68733968ca7cf3172f613175f67f3cb7c2c9e7fde6e57b2166ca6aba6f9b9caa3fac24327e725c850a22c82bb99673c4f4a9753451a23846a0a63405eca9da0488ee575884e638a145fc367950fe499c8533a3808a02f7f1df61b8d8150872345409b7bfe9d9d9e5f824c6526", 0x7f, 0x6}, {&(0x7f0000001600)="43b4097e0e19c53e564c5420d0ee84d625fa029ed2f34befa0ede1b36c2a2a075624b872b69f5b69507ededecdbecaf1404a03efccc0048600f5317404d0a8e21f98bb1b34a74f37a1a183274eaa2d21b35bada74770ff6c9ad663a41e39ae79c486cc2e7ffb9e1455523bfc4a4f29672be49b3bed0373c53fe38bfcbf8f22f30e40d9b28c00734dae0392289d051cb6734f271bbb5e9d1e59912cc82268659c1db08dee842f21ca45761e917421008c25afe29ed6ed3fcb95811fbdfa1eb0", 0xbf, 0x401}, {&(0x7f00000016c0)="53d281e8d520e4ae2cc2033b71e6cdbf9f8ba2622b16ec162c84b97eaba466ab8ba5055193ef7ef8fdc8917be96140ff3c024d1ff73fe1121bfcb250956a28a5c764a29d2727f5ff257a327c2713c5753ddf2fc6913cbff168c08086d5a16978098544a82f1e755c05d5ef06ce717d6a2517690a653c10fe0b834999dbb7ab338c0ffc9a55e51ffd786529d437653955c9bce9c35709cbd2db1c27e9dc", 0x9d, 0x80000000}], 0x2040004, &(0x7f0000000540)={[{@flock_strict='flock=strict'}, {@source={'source', 0x3d, ':@\xde#,)'}}, {@source={'source', 0x3d, '}'}}], [{@subj_user={'subj_user', 0x3d, '\'$,\']\x86'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x1d}}]}) 20:49:33 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8864000000000000) 20:49:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001cc0)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x4c, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44840}, 0x44001) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) clock_settime(0x0, &(0x7f0000000280)={0x77359400}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000001c0)={0x0, 0x0, 0x9, r5, 0x0, &(0x7f0000000180)={0x9b0909, 0x80, [], @p_u32=&(0x7f00000000c0)=0x7fffffff}}) sendmsg$rds(r6, &(0x7f0000001c40)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001540), 0x0, &(0x7f0000002000)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0x2}, {&(0x7f00000015c0)=""/71, 0x47}, &(0x7f00000018c0)=[{&(0x7f0000001640)=""/162, 0xa2}, {&(0x7f0000001700)=""/119, 0x77}, {&(0x7f0000001780)=""/206, 0xce}, {&(0x7f0000001880)=""/60, 0x3c}], 0x4, 0x40, 0x87}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001900)=""/139, 0x8b}, &(0x7f00000019c0), 0x16}}, @mask_cswp={0x58, 0x114, 0x9, {{0x25, 0x4}, &(0x7f0000001a00)=0x8001, &(0x7f0000001a40)=0x6, 0x7fff, 0x8, 0x1, 0xc8, 0x1, 0x200}}, @fadd={0x58, 0x114, 0x6, {{0x101, 0x69e}, &(0x7f0000001a80)=0x2, &(0x7f0000001ac0)=0x946, 0xaf, 0xfffffffffffffff9, 0x4, 0x3816, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001f00)=""/181, 0xb5}, &(0x7f0000001fc0), 0x4}}], 0x158, 0x4c000}, 0x4004080) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) 20:49:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1500}, 0x40) [ 1472.518853][T15920] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x477, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1600}, 0x40) [ 1472.863668][T15947] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x40) 20:49:34 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x478, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x40) [ 1473.192998][T15962] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x479, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1900}, 0x40) 20:49:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88a8ffff00000000) 20:49:36 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x80000000}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 20:49:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1a00}, 0x40) [ 1475.636430][T16027] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1b00}, 0x40) 20:49:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1c00}, 0x40) 20:49:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x47a, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1d00}, 0x40) 20:49:37 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1e00}, 0x40) [ 1476.051246][T16052] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x28bb, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1476.508139][T16061] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1f00}, 0x40) 20:49:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5200, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:39 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x88caffff00000000) 20:49:39 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x7ffffffff000) 20:49:39 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x3}, @mss={0x2, 0x8}, @window={0x3, 0xac6, 0x2}, @timestamp, @mss={0x2, 0x3}], 0x5) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @remote}}) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x10000) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000300)={0xffe0, {0x7c, 0x9c, 0x80000001, 0x161d, 0x6, 0x3}}) syz_extract_tcp_res(&(0x7f0000000140), 0xe2, 0x3) syz_extract_tcp_res(&(0x7f0000000180), 0x3a42, 0x800) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000006772a8bf00710601fe8000000000000000000000000000aafc0200000000000000000000000000001608040401100300fc000000000000000000000000000000fc010000000000000000000000000001200100000000000000000000000000020000000000e1f84ef3b087a84cdfde066251cd9f1d00000000000000000000010000000000000000000000000000000200004e2400004e2200"], 0x9d) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000280)='./bus\x00', 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x2000}, 0x40) 20:49:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x2100}, 0x40) 20:49:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3100}, 0x40) 20:49:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4000}, 0x40) 20:49:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x40) [ 1479.337040][T16084] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:40 executing program 4: syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f00000001c0)="600084e002000a0000000001000000c97f13", 0x12, 0x400}, {&(0x7f0000000880)="ee9f84a43eccaf1315bb397d00c1b6dd820dd13916181dba620938cb30f1c21afe3d926298b25834e890092d642cafe5db21ba9494febcf66079b722e73be3a8708a3624250f9f59fbbe942995c6c1e83a34e5779e8a4f40fdb6ffe59ffe4903500d3cd8c8f3ed19ad176daf94cf7fcaf2922f8aab3becc60c8d39ddf43cd6d2e9301da3caa35719f25b83478559e0e891dcb756ee22964d03f37561f5797490a0b93506482822075ba96db35a440d046e44eb4a79986b518281609003b6fae04a18be9a83ce7efa2ab80f75c90d78f0b4179d674376db1f7ae8745641adcde0d245722744bcea2fac9445014ee2293985119573ffcc0c22eb0769de1e9e5db53aa3378a4426503010a7f01ae262faaa84216784ea3bc8f3c6247265838211527a0132ccf883ee08a6ea1a785e47ce16663f1c744af49200d5f3bc326e7d9089a5f17d0ad05f06e48c205f9b6d087ba7d3b6745e65700c009572a75b4bfbf6687821bc723b61b5abe7357e68a9b0640bfb9c01000080000000000e840ecf379c576c05757d44b19de0e2aa364c42156219a72cc943a60f0410891ed134f35f5fe6b4cf3abbcb984436322358a7c9393724860d87253981f9e79dbeb789577ead0ede31e19a2b114a0e4d82b3e1023dd28b6382e67e3246d2912e55cf9928da32c1027cef7c6c610ea8fce149a7af20224b4e028601936ef9a78d80ff5567084ec128766e822d6124186d82e760128dd7de2653939d353c12f96deff3a28b022c784bd37df7f76640bcbcb01a4676d58b3e9c2baae66230e5f54a37527e8129d161b0c06f25648c55a7e5b2db528053c3e3864f41728b7935e575568ad114eb8c811bf19e07a398babbc64fbeab842688554783ed1551949a791e33799e59a34b6bdabc3458c379c735198292e5a272187449249d2c8a9aa58f3835a3e1716083bb04e4cbe140d1587a21e4ec2ae1f3ad81134df55903ffb8e173646352915a2c706709cf46538978224c0d6dc437cbfc37abfbd1b76feb5ca3aeb1ac8cbd40d5ba896f79ee8f76b0809f59b86862648774d2ace98b825e7a465b5dd80e491965971e7797aba3968441", 0x309, 0x34f9}], 0x80, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) 20:49:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:42 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x80ffff}, 0x40) 20:49:42 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5300, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) prctl$PR_SVE_SET_VL(0x32, 0x3fc33) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYRES64=r2]) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x84) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./bus\x00', 0x2, 0x2, &(0x7f0000000340)=[{&(0x7f0000000200)="4b278dc3ccbc3b812c668e06b4e91abcb6ca886951ea123fa97dce7ca1d78d7780848c5d5d606a1a", 0x28, 0xb12d}, {&(0x7f0000000240)="e6247a295db7dea1b9ac74f6ab8376d9b73bdd42b13974a8b9342b1435b27b85ff7112e11461cfe4add0dc810ff521c14931493cd1093056545869bc88eaa1190c8380d701904e4cddc98a334f6eadd8a53d7a7c6b2a37907509ca41bf9c50264da309b13d2b28f69532784f61cb044214ba3943e1f8f793753a2a7b00486f74beb9f4fc6701a92d6a2d98a55136d640de3bd5ced5767a84d5283383724e4cf303b8498c9e44d7311556aaeb852890f948a8121949d40585238128a76534b5c3aa2bd7feeeea4c9e8b9c9ea874a432", 0xcf, 0x2}], 0xa000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f696e6f64655f63616368652c64f76342c7fac704fec6c18df0656772616465642c6e6f7373642c667261676d656e743d646174612c61636c2c736d61636b6673666c6c657231002c646f6e745f61707072616973652c6d6561737572652c00"]) 20:49:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x8906000000000000) 20:49:42 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 20:49:42 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x40) 20:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x40) 20:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, 0x40) 20:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) [ 1482.318842][T16145] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4000000}, 0x40) 20:49:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:44 executing program 4: close(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8f2", 0x17}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, r2, 0x31905e13403123b7, 0x0, 0x0, {0x4, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x400, 0x0) fchdir(r0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x4ea00) write$9p(r3, &(0x7f0000001400)=';', 0xb00c) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 20:49:44 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5400, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) 20:49:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:44 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x894f000000000000) 20:49:44 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r5, @ANYRESHEX=r6, @ANYRES16, @ANYRESDEC=r7, @ANYRES16, @ANYRES32=r8, @ANYRESOCT=r4], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x6000000}, 0x40) 20:49:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x0, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x7000000}, 0x40) 20:49:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:44 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x40) [ 1483.728090][T16210] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:45 executing program 4: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x3f000000) 20:49:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:45 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x9000000}, 0x40) 20:49:45 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5500, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1484.722248][T16257] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:46 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xee0f000000000000) 20:49:46 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 20:49:46 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5600, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xa000000}, 0x40) 20:49:46 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r3) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x1) r4 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6=@loopback}}}, &(0x7f0000000240)=0xe8) preadv(r1, &(0x7f00000017c0), 0x1a2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x1a, 0x13, 0x0, 0x8, 0x0, 0x0, 0x4, 0x38, 0xffffffffffffffff}) 20:49:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xb000000}, 0x40) 20:49:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xc000000}, 0x40) 20:49:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:46 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xd000000}, 0x40) [ 1485.946994][T16289] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5700, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:48 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xe000000}, 0x40) 20:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xfc0f000000000000) 20:49:48 executing program 4: syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaad56e0bf2aaaa0086dd60"], 0x0) 20:49:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:48 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xf000000}, 0x40) 20:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:48 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x40) [ 1487.463258][T16345] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:48 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5800, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:48 executing program 4: bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r1, r0) 20:49:48 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x11000000}, 0x40) [ 1488.209794][T16395] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:49 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0xffffffff00000000) 20:49:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:49 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @loopback, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:49 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x12000000}, 0x40) 20:49:49 executing program 4: r0 = socket(0x2, 0x4003, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000000140)="01003f8a", 0x4) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="8202adfdffffffff"], 0x10) writev(r1, &(0x7f0000000000)=[{0x0}], 0x1) 20:49:49 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5900, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x13000000}, 0x40) 20:49:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x14000000}, 0x40) 20:49:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:49:50 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x15000000}, 0x40) [ 1489.446069][T16425] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000015) 20:49:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x16000000}, 0x40) 20:49:51 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5a00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x8040, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00@\a\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={r7, @in={{0x2, 0x4e20, @remote}}, 0x7fffffff, 0x8, 0x28, 0x9, 0x9, 0x3ff, 0x8}, 0x9c) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) fgetxattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/183, 0xb7) 20:49:51 executing program 4: ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, "422899f0837b26b0"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 20:49:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000015) 20:49:51 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(0x0, 0x0, 0x0) r4 = getpgid(0x0) r5 = socket(0x11, 0x800000003, 0x0) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) r7 = getgid() sendmsg$unix(r0, &(0x7f0000001a00)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000440)}, {&(0x7f0000000480)="a97e0d52822389d0931bf220358886ee27b6d0d912da61de79b50551a0a325effdb51900d0b1a2a47e1a54aba6094b2e29ffe78ab0e4c7a04737f9faa25ed2b62b3449e8a63a3a824eab3e7426776abd777d16fa79119a0a036e230d54302d8665159e6797ace897df4b548e89c96a05b4cadbcdbd01de1a1a49c30561a27e7ee27ef7d1c9d9050b2c16fde0d840df3abaa57d03ff3293512e3516f2c2a1a70ed8ac8a4d537d7028e8da1945a238a6b4209d54b711d4332c533d468392095003b95c4c", 0xc3}, {&(0x7f0000000580)="b2c6d2f780269527f9649e56cfc1e0d7ad2d0cfc03270e5ff5250e1091b0d6bfa8763c6a661f0e045bab46521a86a25321b41512618419474fdfb7aa3fbb254a9e85f5be2617ab4ad357e1b62c336a13", 0x50}, {&(0x7f0000000600)="e6010ac510db653fea2f39a431390b32fda7415974ace1370a5b2c0e8b3a789dd718a3bf", 0x24}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="ee3a817bbb07ffb06c8064076aabf682c35336fb5134db1ed80c34cc69166f8985807a698a17c6d65e89e884928a82c224a76d9a2779377228f0fbc0b7eb222717f6382fac4b", 0x46}, {&(0x7f00000016c0)="e3dc573c79d433b546a3cb458b6d33f4684514d6a805dede4937974b6ae1aebb5d84ae59c074b742efc87f6120f59d656021e33db16f154e2bf5d0320dffe36f584df71cc1deb49ce012aba64d5508f21e3b30fea98998c41d71bd6b21830be3f47042f5511547651dafc55d0ab774a4b923b7b7229039b64bb17946ae17e1991bf099f9fa18db171d3db25be2a736a57009f94143ca57c3b0be300853f7e53df0e2e909e28ac4e9a0894231652421a5e825afc1243261c060a7408fd94439e310cd4c4f7da0d18d99b4939d9f167cdc1becf401617330", 0xd7}], 0x7, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x60, 0x15}, 0x880) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000001840)={@void, @void, @eth={@dev={[], 0x3a}, @local, @void, {@ipv4={0x800, @igmp={{0x17, 0x4, 0x0, 0x2e, 0x64, 0x0, 0x400, 0x0, 0x2, 0x0, @private=0xa010101, @empty, {[@end, @rr={0x7, 0xf, 0xc6, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @noop, @noop, @ra={0x94, 0x4}, @end, @noop, @noop, @rr={0x7, 0x27, 0x3b, [@remote, @private=0xa010102, @broadcast, @rand_addr=0x64010100, @multicast1, @multicast2, @loopback, @rand_addr=0x64010100, @remote]}, @generic={0x7, 0x6, "22da826b"}]}}, {0x1e, 0x0, 0x0, @loopback}}}}}}, 0x72) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0xb0, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000240)=""/176}, &(0x7f0000000140)=0x78) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) 20:49:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x17000000}, 0x40) 20:49:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0) tkill(r2, 0x1000000000015) 20:49:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x18000000}, 0x40) 20:49:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) 20:49:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x19000000}, 0x40) 20:49:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) 20:49:52 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x40) 20:49:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5b00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 20:49:52 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)={0x0, 0x4, [@broadcast, @local, @dev={[], 0x15}, @multicast]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x5, 0x70, 0x3f, 0x7, 0x81, 0x4, 0x0, 0x2, 0x400, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x8010, 0x0, 0x5, 0x8, 0x6, 0x9, 0x6}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000004b0800000000aaaaaab3aaaa08004500009c6c882dfcd5e59f2108df944e53be8f1c00000400000290780000000000000000000090787f000001464b9f84918fa0aed5bc22e8d53c83b13ee91a10816d964b191ab8da8f2a79bd0553a2e73cd8241c28bc9623f192f866ed3a6bbf8611e4d0ab3bdc2af7d9da85704437ae0b3538aa6f4eccea1907e043fe8c11cf65e4a3d4fd13b61eec173db59fb535cd3f11ff63138beb634571e510561b62b20de0fe689b713a89923b24f287a7c904268442c102ab45d370cb2f1cf562b3640a300bf261e5887444f8d414d4e22765379e88ec6d10dc071e2c057c889ee05044d508d669919b236bb55e495dcfbaf3930d4cd2f376ee8294403bfd858a3d348fa499c63cd7cccdf11586320f59113c92bc152b98bce390512ec536ef08ca4714439f9c39b100196a01e8c73b9f834101245aaedbcde3619245754800d30cdd946fb86a90766d00"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10008, 0x0) 20:49:52 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x4c003, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000180)={{0x2, 0x0, @reserved="e5ddcc7e1e1a844145e3a24bb9a40d5bb70fb5fe625e11e12ab69b2d68c235ba"}}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1b000000}, 0x40) 20:49:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r2, 0x1000000000015) 20:49:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1c000000}, 0x40) 20:49:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1d000000}, 0x40) 20:49:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:49:53 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1e000000}, 0x40) 20:49:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:49:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:49:53 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5c00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1493.210164][T16590] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:54 executing program 4: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="00000a5b1f00", @val={@void}, {@ipv4={0x8100, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5}}}}}}, 0x0) 20:49:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x0) 20:49:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1f000000}, 0x40) 20:49:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5d00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:54 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000180)=0x4) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:54 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = semget(0x1, 0x4, 0x0) semctl$SEM_INFO(r4, 0x3, 0x13, &(0x7f0000000280)=""/68) semctl$SEM_INFO(r4, 0x0, 0x13, &(0x7f0000000180)=""/143) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1493.572984][T16602] sock: process `syz-executor.4' is using obsolete setsockopt SO_BSDCOMPAT 20:49:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x0) 20:49:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x0) 20:49:54 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x40) 20:49:55 executing program 2: 20:49:55 executing program 2: 20:49:55 executing program 2: [ 1494.322934][T16617] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:55 executing program 4: 20:49:55 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x21000000}, 0x40) 20:49:55 executing program 2: 20:49:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5e00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1495.209416][T16651] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x31000000}, 0x40) 20:49:56 executing program 2: 20:49:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5f00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)="d759", 0x2}], 0x1, &(0x7f0000000500)=[@ip_tos_u8={{0x11}}], 0x18}, 0x0) 20:49:56 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0xaf5723c2e675c746}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x8, 0x1, ':\xca)\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001180)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000180)=""/4096}, &(0x7f0000001200)=0x78) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000001340)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa08004500001c00000000000000000200000000000000000090787f00000123baefa8a81d6c28aabf5a6d29e6eca3ca5795685ea23b1d3e60f07e7a2acfd2a32eb64f26b4a0ea2e9a68eb16cad6d8259f1b194a9d8b6e4214936060903e7204fefdcc0db7c9dc9298bde036becb95119464b5638d7b727cdd0e3fe936911463e9ad8c6dd1b1a93d31bddfbd89738f0b6561e84668fd"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:56 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) accept4$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0xc0800) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x1000) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0x2}, @void, @llc={@snap={0x1, 0x0, "7f", "7de8af", 0xd, "15624571909d6d47e48108c5bff16e821b3792f4a6206b31447e52bf6532a316aa84c6aa0ac995193fa1c5c937ddfe815480d14934a67c5e9ae40975db69a2d381570412c9449c81618468d65bc94e229546ad64399eed4b537f3790d03520bb26279316660c6c11940451"}}}, 0x77) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 20:49:56 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0xbc, 0x0, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x200}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7f}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc4b8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7f}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004041}, 0x8000) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x1e1) setresuid(0x0, r2, 0x0) socket(0x0, 0x6, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)={0x48, 0x0, 0x43df2f74037697bf, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan0\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x844}, 0x20004843) ioctl$sock_SIOCDELRT(r1, 0x890c, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="dd0700000005000000003400000015248f46081b26b33350439142ff99200efe56a088"], 0x14}}, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 20:49:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xe4ffffff}, 0x40) 20:49:57 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xffff8000}, 0x40) 20:49:57 executing program 2: sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0xd}, &(0x7f0000001fee)='R\tr0s\xac\x84cusgrVex:De', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 20:49:57 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0xffffffe4}, 0x40) 20:49:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="bc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x4}}]}, 0x30}}, 0x0) 20:49:57 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f0000000080)) 20:49:57 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1497.522611][T16718] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:49:58 executing program 4: ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x25, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000)='/dev/usb/hiddev#\x00', 0x5, 0x10082) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x4, 0x1, 0x4}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"]) syz_open_dev$hidraw(0x0, 0x0, 0x180041) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(r1, &(0x7f0000001200)='\x00', 0x128e84bc) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x80041) ioctl$HIDIOCAPPLICATION(r3, 0x4030582b, 0x4001e0) read$hidraw(r2, 0x0, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x9142) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000300)=""/121) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000100)={0x8, 0xe0, 0x9a39, 0x25, 0xd0c7, 0x7}) r5 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(r5, &(0x7f0000001200)='\x00', 0xffffff45) ioctl$HIDIOCGRDESCSIZE(r4, 0x6611, 0x0) 20:49:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = dup2(r0, r1) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f00000001c0)=0x9759, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 20:49:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'ip6erspan0\x00', {0x7, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:49:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 20:49:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xd0, &(0x7f0000000040), 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) accept4$x25(r1, 0x0, &(0x7f00000000c0), 0x800) munlockall() splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 20:49:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6100, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:49:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 20:49:58 executing program 2: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) r0 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfd0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) write$hidraw(r1, &(0x7f00000000c0)='@', 0x8f0a5b33) read$hidraw(r0, &(0x7f0000003200)=""/4096, 0xffffffad) syz_open_dev$hiddev(0x0, 0xfffffffffffffc00, 0x40000) syz_open_dev$hiddev(0x0, 0x0, 0x60ff) syz_usb_connect_ath9k(0x3, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x51c, [{{0x9, 0x2, 0x18}}]}}, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x12d43d) write$hidraw(r3, &(0x7f0000000000)="3a0ac17e00595345e24ea72cf22da8cf6bd8605cc6dd64", 0x800000) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xa664) syz_open_dev$hidraw(0x0, 0x0, 0x0) r4 = syz_open_dev$hidraw(0x0, 0xfffffffffffffffe, 0x2) write$hidraw(r4, &(0x7f0000001200)='\x00', 0xffffff45) syz_open_dev$hidraw(0x0, 0x0, 0x0) 20:49:59 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) getsockopt$inet_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000180)=""/248, &(0x7f00000000c0)=0xf8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1497.952929][ T7950] usb 5-1: new high-speed USB device number 37 using dummy_hcd 20:49:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 20:49:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x40) [ 1498.262816][ T7950] usb 5-1: too many configurations: 37, using maximum allowed: 8 [ 1498.412581][ T12] usb 3-1: new high-speed USB device number 16 using dummy_hcd 20:49:59 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6}, 0x40) [ 1498.954328][ T12] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1498.993023][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.001105][ T12] usb 3-1: Product: syz [ 1499.018412][ T12] usb 3-1: Manufacturer: syz [ 1499.053630][ T12] usb 3-1: SerialNumber: syz [ 1499.413066][ T7950] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1499.422157][ T7950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.441460][ T7950] usb 5-1: Product: syz [ 1499.446333][ T7950] usb 5-1: Manufacturer: syz [ 1499.450981][ T7950] usb 5-1: SerialNumber: syz 20:50:01 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000740)=ANY=[@ANYBLOB="16010000c2b1b00896050100e29f0001000109021b0001000000000904000001dcae360007058165a2"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="004010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000e00)='/dev/input/event#\x00', 0x6c6, 0x0) 20:50:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6200, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x40) 20:50:01 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0xcf453fcbbe050477) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x17, 0x4, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:01 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') r7 = gettid() r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r8, 0xc1004111, &(0x7f0000000280)={0xffffffff, [0x6, 0xe95, 0x6], [{0x100, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x5, 0x1, 0x1}, {0x3, 0x8cfe, 0x0, 0x1, 0x1}, {0x2, 0xfff, 0x1, 0x1, 0x0, 0x1}, {0xb58b, 0xfffffffd, 0x0, 0x0, 0x1, 0x1}, {0x226d, 0xffff, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x7ff, 0x1}, {0x3ff, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x617, 0x100, 0x1, 0x1, 0x1, 0x1}, {0x200, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x8, 0xa, 0x1, 0x1, 0x1}], 0x3}) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="00200000aa1c6c9f7b278df837ed2904644fb298ec762a8ffaec2c635a6617585ec7e87f01a9c28027953628f95c9511793412d5b8000000", @ANYRES16=r6, @ANYBLOB="0b3e0000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x14b598e2}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=r6, @ANYBLOB="00012dbd7000fbdbdf253d000000080001007063690011080200303030303a30323a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x809}, 0x400c880) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="020000004b0800000c00aaaaaaaaaaaa08004500001c00000400000290780000000000000000000090787f000001a606b65fd29486d61c773cd8c3e6db8fd09f2e21df6965fddf45dd1c0fbf414295d65707177fe0dc8f60ee5fe64be8a8968423dfb9f7532fede1d75dc73e2ca6c660c86fc733f9cddfe0f977940363f9f40435e0b2219b2b87b6a9b41c9bbdb910708bca8e3812863eb968a44b92ca6064e3"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1500.678917][T11840] usb 5-1: USB disconnect, device number 37 20:50:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x40) 20:50:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x40) 20:50:02 executing program 2: syz_open_dev$evdev(&(0x7f00000003c0)='/dev/input/event#\x00', 0x4000003, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x28840) [ 1501.083666][ T7950] usb 3-1: USB disconnect, device number 16 20:50:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa}, 0x40) 20:50:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000340)) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) fcntl$setpipe(r0, 0x407, 0x0) clock_gettime(0x7, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{}, {r0}], 0x2, &(0x7f00000001c0)={0x0, r2+30000000}, 0x0, 0x0) 20:50:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb}, 0x40) 20:50:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x40) [ 1502.302838][T31422] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1502.543588][T31422] usb 5-1: Using ep0 maxpacket: 8 [ 1502.673043][T31422] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.683290][T31422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.773006][T31422] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice=9f.e2 [ 1502.782102][T31422] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1502.791223][T31422] usb 5-1: Product: syz [ 1502.804013][T31422] usb 5-1: config 0 descriptor?? [ 1503.433832][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08 20:50:06 executing program 4: 20:50:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6300, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='4', 0x1}, {0x0}], 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) 20:50:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd}, 0x40) 20:50:06 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:06 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1505.098294][T31422] usb 5-1: USB disconnect, device number 38 20:50:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe}, 0x40) 20:50:06 executing program 2: 20:50:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf}, 0x40) 20:50:06 executing program 2: 20:50:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10}, 0x40) 20:50:06 executing program 2: [ 1505.885107][T16910] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:07 executing program 4: 20:50:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11}, 0x40) 20:50:07 executing program 2: 20:50:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6400, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1506.905890][T16951] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12}, 0x40) 20:50:08 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x81, 0x0) 20:50:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @random="f6004400", @void, {@ipv4={0x8864, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x21, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 20:50:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6500, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:08 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000380)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xcc, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, {0xa, 0x0, @dev={[], 0x36}}, {0xa}, {0xa}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0xffffffff}, @NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0x0]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x0, @dev={[], 0x44}}, {0xa, 0x0, @dev={[], 0x17}}, {0xa, 0x0, @local}, {0xa, 0x0, @local}, {0xa, 0x0, @local}, {0xa, 0x0, @multicast}, {0xa}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x802) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:08 executing program 0: pipe(&(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = dup(0xffffffffffffffff) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xffff) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000000c0)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f00000012c0)={0x3, 0x0, 0x80, 0x3}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x86) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000001c0)={0x1068, r8, 0x10, 0x1, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1054, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "08312402a66a3400304dec73a1f4344bd4ed6e29b6d8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1068}, 0x1, 0x0, 0x0, 0x2002c010}, 0x4008000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13}, 0x40) [ 1507.541823][T16975] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:50:08 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000000)={@remote, @rand_addr, r5}, 0xc) 20:50:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14}, 0x40) 20:50:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x15}, 0x40) 20:50:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000400000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x87c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfff}}}]}]}}]}, 0x87c}}, 0x0) 20:50:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16}, 0x40) [ 1508.231578][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1508.269758][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:09 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 20:50:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x17}, 0x40) 20:50:10 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005e7ffffff000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000400000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 20:50:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6600, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18}, 0x40) 20:50:10 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd6e2bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002a00fb480dff5200000000c9709d7b9c", @ANYRES32=r3], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) r4 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x84ffda, 0x0) 20:50:10 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @ipx={0x4, 0xc4, 0x48, "b714f8b260b9", 0x1}, @phonet={0x23, 0x1, 0x2, 0x3}}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x97, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYRES64=r0], 0x6c}}, 0x20040080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', r5}) close(r2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000004b0100008ce14cd067f22f7941d332595a290000aaaaaaaaaaaa08004500001c00000400000090780000001c0000000000c79e97d0000001c1c9e15dab597a28509f87d28d040033c4d900b8894271ffff0000ea1245a4c521e3aa52cbc2f496874a403aa8d15e30ae12b03e8ce6dd60d7bcaef524f300b315c044aa4732a4b8db0f0887cb01259176f9b009b4e487597a1e97a86d3d09000a7cdca972000000000000000000690014ea06459f8db5352a5c9bf01cbb5ed106fdea77a4d3e8b9c5f2fdcebc305581b468b0dfbcf27f33b47b24997ef40c54a13e41bb74a6090000005a9e1dcb5300"/245], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) accept4$x25(r0, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="020000004b08000e0000aaaaaaaaaaaa08004500001c00000400000290780000000000000000000090787f000001"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) 20:50:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19}, 0x40) 20:50:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a}, 0x40) [ 1509.855329][T17063] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.2'. 20:50:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b}, 0x40) 20:50:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c}, 0x40) [ 1510.227779][T17059] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:11 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x1b, 0x23, 0x38, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 20:50:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d}, 0x40) [ 1511.191522][T17103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1511.221695][T17102] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 20:50:12 executing program 4: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/177) 20:50:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6700, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e}, 0x40) 20:50:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r4) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 20:50:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f00000000c0)={0x3, 0x0, 0x20, 0x15, 0x2e, &(0x7f0000000180)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@val={0x2}, @void, @eth={@random='K\b\x00', @random="7e4e63045999", @void, {@ipv4={0x800, @udp={{0xf, 0x4, 0x3, 0x9, 0xf3, 0x65, 0x0, 0x42, 0x11, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x16}, {[@noop, @lsrr={0x83, 0x1b, 0xa1, [@loopback, @loopback, @loopback, @loopback, @loopback, @multicast1]}, @end, @generic={0x88, 0xb, "fc38664afd72eb0277"}]}}, {0x4e21, 0x4e21, 0xb7, 0x0, @gue={{0x2, 0x1, 0x2, 0x66, 0x0, @val=0x80}, "ea8f132282e323a307d3dd3c3730421819dfc057d2f332790794c04a59300137da6e0e535bfda7ca21ad00566d9763857d2bf794e39a58bbbf2a528796d188fc74137396479bcec11c4f808adb6bd2ac4106260613e7285ba06475379c9251091fbde0eca18544b78c6ba2061ea20799202da44829c00f1a3ad6786e3f3be964522684afb97563389d9ce6e87249a73620e1a76d36a3d9ded47456c2ba1534f1940ebfa59c978c"}}}}}}}, 0x105) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000140)={0x338, 0x3, 0x5, 0x7f}) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:12 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000380)={[0xce7b, 0x40, 0x1, 0x1, 0x6, 0x101, 0x1ff, 0x1000, 0xffffffff, 0x8, 0x1, 0x3, 0x6, 0x0, 0xfffffe01, 0x1, 0x0, 0xff, 0x6, 0xfffffffc, 0x3401, 0x7939, 0x8, 0x5, 0x8, 0x82, 0x8, 0x4, 0x9, 0x10001, 0x6, 0x4, 0x3, 0x89a, 0x100, 0x3fc0, 0xd68d, 0x2, 0x0, 0x6, 0xffff, 0x8, 0x10001, 0xfffff000, 0x401, 0x4, 0x7, 0x2, 0x40, 0x2, 0x1, 0x9, 0xfff, 0x2, 0x1f, 0x1, 0x6, 0x3, 0x6, 0x4, 0x1, 0x3, 0x1f, 0x80000000, 0x1, 0x3051, 0x3c6b, 0xffff, 0x8001, 0x0, 0xf7, 0xaf89, 0x400, 0x4, 0x4, 0x3f, 0x0, 0x8, 0x2, 0x3, 0x185d, 0x80, 0x1000, 0x9, 0x8, 0x5bb, 0x80, 0x7fff, 0x6, 0x5, 0x400, 0x7, 0x3, 0x7, 0x7, 0x3, 0x97e7, 0xa, 0x401, 0x7fff, 0x80, 0xfffffc00, 0x1, 0x1, 0x0, 0x2, 0x80000001, 0x24, 0x85, 0x7, 0x2, 0x200, 0x6, 0x0, 0xb84f, 0x7b49, 0x3, 0x100, 0x9, 0x0, 0xd4000000, 0x8, 0x7f, 0x3, 0x6d2f, 0xfffffff9, 0x7fff, 0xdc63, 0x1ff, 0x1, 0x40, 0x3, 0x74ee, 0x1, 0x40, 0x3ff, 0xfffffffb, 0x7fffffff, 0xfff, 0x5, 0x80000000, 0x400, 0x400, 0x3, 0x7fff, 0x0, 0x7fffffff, 0x1, 0xc1, 0x6a82, 0xffffffff, 0xb94, 0x9, 0x0, 0x1, 0x7, 0x4, 0x6, 0x80000001, 0x80000000, 0x81, 0x5, 0x6faae711, 0x0, 0x7ff, 0x7, 0x8000005, 0x7, 0x7fffffff, 0x1, 0x9, 0x2, 0x9, 0xfffffffa, 0x9, 0x10000, 0x1, 0x0, 0xd2, 0xf575, 0x7, 0x8, 0x6, 0x10000, 0x5, 0xffffffff, 0xef8, 0x69, 0x2a2, 0x1, 0x1de, 0x3, 0x4, 0x6, 0x7fff, 0x1f, 0x5, 0x1, 0x6, 0x10000, 0x9, 0x25, 0xfffffff8, 0x0, 0x8000, 0x0, 0x6, 0x2, 0x8, 0xffff3f51, 0x7ea, 0x93b2, 0x5, 0xff, 0x3f, 0x2, 0x2, 0x7, 0xffffff01, 0x2, 0x9, 0xb8b, 0x5, 0x7, 0x3, 0x5, 0x3, 0x4, 0x9, 0x2, 0x7ff, 0x6, 0x2, 0x2, 0x10001, 0x4, 0x6e6, 0x6, 0x2, 0x2ab4, 0x10001, 0xffff, 0x58, 0x3, 0x85, 0x4, 0x71, 0x2, 0x4, 0x73b, 0x7, 0x8, 0x4, 0x3ff, 0x4, 0x9, 0x1, 0xffffa338, 0x8000000, 0x5, 0x2, 0x300, 0x4, 0x2e707fc1, 0x5, 0x1, 0xf44, 0x81, 0xd6e, 0x5, 0x79, 0xebcd, 0x81, 0x5, 0x100, 0x7, 0x4, 0x2bcf, 0x2, 0x8, 0xe7, 0xb1eb, 0x0, 0x8000, 0x0, 0x1f90, 0xffffffff, 0x2b7, 0x2, 0x3ff, 0x19c2c6b1, 0x80000000, 0x894, 0x1, 0x1, 0x6, 0x37bc, 0x6, 0x3f, 0x3f, 0x3, 0x100, 0x2, 0x9, 0xe6e0, 0x401, 0x67, 0x3, 0x5, 0x0, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x3, 0xf7, 0xacad, 0xccd, 0x7ff, 0x7, 0x8000, 0x1, 0x9, 0x3f99, 0x0, 0x7fff, 0x7ff, 0x8, 0x0, 0x3, 0x7, 0x5, 0x7fffffff, 0x1ff, 0xc3d, 0xdcc3, 0x7, 0x1, 0x4, 0x7, 0x2c98e8c0, 0x401, 0x1f, 0x1, 0x6, 0x6, 0x8, 0x800, 0x1404aa7f, 0x0, 0x7, 0x3, 0x0, 0xff, 0x8, 0x169, 0xa2, 0x101, 0x2, 0x5, 0x4c, 0x8, 0x7, 0x1, 0x6, 0x8, 0x9, 0x9, 0x58f, 0xda2, 0x2, 0x0, 0x5, 0x1ff, 0x69, 0xfff, 0x0, 0x9, 0x2, 0x4, 0x1, 0x4, 0x2, 0x80, 0x0, 0x9d21, 0x1, 0x2, 0x3d13, 0x2, 0x3, 0x7fff, 0x3, 0xb6, 0x1, 0xffffffff, 0x52da, 0x81, 0x8001, 0x10001, 0x0, 0x7, 0x2, 0x8, 0x8d, 0x5, 0x3, 0x2, 0x5, 0xfff, 0x1, 0x7ff, 0x59c, 0x175, 0x1, 0x9, 0xffffffff, 0x7fffffff, 0x0, 0xffff8000, 0xff, 0x8583, 0x47e3, 0x1000, 0x10001, 0xfb04, 0x5, 0x4, 0x3, 0x7ff, 0xfffffff8, 0xfc, 0xffff, 0x6, 0x4, 0x9, 0xd66, 0x6e, 0x40, 0x6, 0x40, 0xc8, 0x7, 0x86, 0x4, 0x5, 0x0, 0x3, 0x4, 0x3, 0x0, 0x2b, 0x9b000000, 0x1, 0xd2, 0x2, 0x46ce, 0x1, 0x0, 0x1, 0x7f, 0x20, 0x16, 0x620, 0xed, 0x80000001, 0x8, 0x100, 0x9, 0x0, 0x7, 0x3, 0x9, 0x2, 0x2, 0x4, 0xff, 0x3, 0x6, 0x2029, 0x7, 0x6, 0xf88, 0xffffff00, 0x5, 0xbbfd, 0x7, 0x8, 0x8001, 0x3, 0x80, 0x9, 0x800, 0x6, 0x8001, 0x6, 0x3cdefa1f, 0x3ff, 0x8, 0xffffffff, 0x2, 0x5, 0xfffffffc, 0x2, 0x6, 0xfffffff9, 0x7fff, 0x7, 0x2, 0x5, 0x8, 0x1, 0x7, 0x7ff, 0x2c3c, 0x8000, 0x1, 0x473a, 0x1ff, 0x8, 0x4, 0x20, 0x7, 0x7ff, 0x20, 0x8, 0x47, 0x0, 0x0, 0x2, 0x5a5, 0x7ff, 0xa94, 0x10000, 0x1, 0x9, 0x0, 0x81, 0x9, 0x4, 0x9, 0xf0b9, 0x9, 0x81000, 0xffff9616, 0x5, 0x101, 0x9, 0x1, 0x6, 0xffffff01, 0x2, 0x45, 0x9, 0x1, 0x6, 0x7, 0x5, 0x2, 0x3, 0x7fff, 0x2, 0x5, 0x1, 0x3ff, 0x2, 0x7, 0x1000, 0x1, 0x7, 0x8, 0x1, 0x401, 0x5, 0x6, 0x1f, 0x1, 0xffffffc0, 0x4, 0x200, 0x3, 0x4, 0x6, 0x600, 0x1, 0x4, 0x8, 0x7, 0x0, 0xce6, 0x1000, 0x5, 0xfffff800, 0x6, 0x8, 0x4, 0x77, 0x3ff, 0x2, 0x894, 0xca9, 0x5, 0x8, 0x1f, 0x40, 0xffff, 0x101, 0x6b, 0x2, 0x6, 0xfff, 0x1, 0x9, 0x9, 0x2, 0xc84, 0x8, 0x1ff, 0x24, 0x3f, 0xfffffff8, 0x0, 0x200008, 0x10000, 0x1, 0x0, 0x81, 0x3, 0xffffffff, 0x5, 0x12ca165c, 0x3, 0x8, 0x3, 0x1f, 0x9, 0xe45, 0x8, 0x8, 0x7fff, 0x248, 0xfff, 0x7a, 0x7, 0x10000, 0x9, 0x7ff, 0x1, 0x0, 0x8, 0x3c1, 0x1f, 0x8, 0x0, 0x40, 0x4, 0x1000, 0x2, 0xfd, 0x4, 0x8, 0xea, 0x3a, 0x8, 0x10001, 0x4007, 0x80, 0x6, 0x3ff, 0x9, 0x6, 0x0, 0x1000, 0x800, 0x5, 0x7fffffff, 0x8, 0x400, 0x58a3d775, 0x101, 0x0, 0x1, 0x8, 0x5, 0x7, 0x344c9b5, 0x0, 0x926c, 0x66, 0x6, 0xfff, 0x9437, 0x3, 0x200, 0xd9cc, 0x6, 0x0, 0x50b, 0x7fffffff, 0x0, 0x4, 0x800, 0x1, 0x2, 0x8, 0x3, 0x8000, 0x1ff, 0x4, 0x49b8eebd, 0x7b87, 0x5, 0x4, 0x570, 0x1a077656, 0x7f, 0xfd, 0x1000, 0x400, 0x7ff, 0x3, 0xb210, 0x2, 0x5, 0x5, 0x6, 0x5ce3, 0x7, 0xa247, 0x7fff, 0x7fffffff, 0x6, 0x7, 0x400, 0x5, 0x5, 0xfffffffd, 0xc93, 0x6, 0x0, 0x2, 0x5, 0x6, 0xffffffc0, 0x4, 0x10000, 0x7, 0xb67b5c9f, 0x81, 0x7ff, 0x9, 0x75, 0x4, 0x0, 0x0, 0x41fe, 0x5, 0x281, 0x9, 0xff, 0x6, 0x8001, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, 0x3ff, 0xffffdc1a, 0x10000, 0x100, 0xfff, 0xdd, 0x3, 0x533c, 0x73, 0x5, 0xc1, 0x2, 0x6, 0x4, 0x81, 0x200, 0x625, 0xfff, 0xffffffcb, 0x7, 0xd, 0x4, 0x9, 0x55d, 0xc41, 0x8, 0x9, 0x1ff, 0x400, 0x8, 0xffffffff, 0x6, 0x1, 0x40, 0x2, 0x4, 0x80c4, 0x10001, 0x9, 0x0, 0x7d, 0x0, 0x8001, 0x8, 0xfffffffe, 0xff, 0xfffffffc, 0x9, 0x5, 0x5f98, 0x0, 0x80000001, 0x967, 0x101, 0xf5c, 0x5, 0x39fb, 0x3, 0x0, 0xc9, 0x7, 0x6, 0x9, 0xffffffff, 0x7fff, 0xff, 0x2, 0x8, 0x1, 0xe3, 0x2, 0xfffff0f4, 0x6, 0x7, 0x401, 0x6, 0x9, 0x80000001, 0x8, 0x1f, 0x5b, 0x1, 0x4, 0x3, 0x5, 0x101, 0x0, 0x101, 0xfffff79f, 0xb6, 0x5c1, 0xaf4, 0x9, 0x1, 0x9, 0x7, 0x40, 0x81e, 0x7, 0x4, 0x20, 0x1, 0x9, 0x0, 0x8d, 0xffffff52, 0x200, 0x0, 0x69, 0x910, 0x4, 0x401, 0x81, 0x1000, 0x3, 0x1000, 0x80, 0x8, 0x6, 0x0, 0x0, 0xfffffff8, 0x8, 0xf2, 0x400, 0xffffc518, 0x2, 0x3, 0x4, 0x8, 0x760, 0x13f1, 0x3, 0xe3c, 0x6, 0x7, 0x7f, 0x3, 0x1, 0x3, 0x6, 0xfffffff7, 0x7fffffff, 0x8001, 0x23, 0x1, 0x3, 0x0, 0x7ff, 0x1, 0xffffffff, 0x80000000, 0x2, 0x80000001, 0x97b8, 0x7, 0x1000, 0x4, 0x81, 0x9, 0x2, 0x5, 0x6c54, 0x0, 0x400, 0x0, 0x3ff, 0x8, 0x10001, 0x3, 0x7f, 0x3, 0x8, 0x3, 0x4, 0x8000, 0x53a4, 0x1ff, 0x5, 0xf1f4, 0x0, 0x7, 0x88f4, 0x0, 0x8, 0x8b3, 0x8, 0x0, 0x10001, 0x8, 0x200, 0x0, 0x828, 0x1, 0xd68, 0x20, 0x80, 0xffff, 0x81, 0x4, 0x0, 0x3, 0x7ff, 0xaa5, 0x5b, 0x3, 0x3, 0x3ff, 0xfffffc00, 0x8, 0x7f, 0x9, 0x0, 0xe12d, 0x401, 0x3, 0x9, 0x1, 0x8e, 0x3, 0x8000, 0x7fffffff, 0x7, 0x3, 0xfff, 0x649, 0x74, 0x1, 0x9, 0x3, 0x9, 0x4, 0x3710, 0x88, 0x100, 0x80000000, 0x3f, 0x6, 0x5, 0x1, 0x3, 0xb371, 0x1, 0x1c, 0xffff, 0x3c, 0x7, 0x25, 0x8, 0x7, 0x5, 0x0, 0x9, 0xff, 0xf9, 0x2]}) close(r2) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x7c, 0x1, 0x19, "2e75e142875ce84999d57ed9a3377450", "33cd690a72eacd1b9e5b89bd63ed0364a7f08ab13e266559d80f8a78da7e60f0e721d34397acafd9cebc9b941da1202385f9f9586e596db328c5cf5d112942594e87f11e5ebf26d47f8a8fca1f4d79c54664e6da211c7cabd79b2a3a89bdacfc4404655004b0ae"}, 0x7c, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa08004500001c00000400000290780000000000000000000090787f0000014ccf20c3058d1e1d280c68848dd2bb5a752a89a1202e56e1d84b5dc98889ff5440dd48aecefb7e7a0d47cfc350e5586a4c4f2ff3b103598f7773ff59b0ed2d74fc522140d70ff2cb9414b6768762fb"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) setxattr$security_evm(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@sha1={0x1, "cc18a778a42246e941a5a1ff2f1af6a60bfd6435"}, 0x15, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x40) 20:50:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x31}, 0x40) 20:50:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:50:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x300}, 0x40) 20:50:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="eb00000008000000fb4a4ff3265a0f7c2ef767ec88a212f1f58259a184ceeacf3d284fbb171ff3c74b3e7b9a14db255414ea1f1c7e9d36d3588723fca7c7d748be58247d13f26b0ee3b31d93dc6173c882f243fbf735efe3a95ee3818a26ece7067bc36ac8f2aeedb056c2d6695d682352fed4610d8569623260b399e99db4bea7ecb2d4cee4c9abb45aa160d3acda1c62cadb9688ed5a7fa83c74f5ca8555b198344bc6f91f3fd15f41633cacdd912183fb900ff72c314770f604604f9172e0c048cc6276a92538f0862d71823a6fe6274d83eb87870885b75bd9e3e8af1e"], 0xc58000) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) close(r2) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1143442, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r6, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0xc) sendfile(r2, r5, 0x0, 0x8000fffffffe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:50:13 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x500}, 0x40) [ 1512.159897][T17119] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:14 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 20:50:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6800, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x600}, 0x40) 20:50:14 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x298ac1, 0x0) 20:50:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @val={0x2, 0x80, 0x4, 0x895, 0x81, 0x4}, @eth={@random='K\b\x00', @local, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv4={0x800, @gre={{0x11, 0x4, 0x0, 0xc, 0x211, 0x67, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x0, [{@multicast2, 0x1ff}]}, @timestamp={0x44, 0x18, 0xbe, 0x0, 0x1, [0x9af2, 0x7f, 0x1, 0x401, 0xfffffff9]}, @generic={0x44, 0xb, "93f125532f6b90c5d0"}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xb5, 0x0, [0x1f], "31fa19c11d657fc550f83d4cae44ec0f704eed23296b0d6a629328bfedac1c0a11878d18e00379b8753d10b041a27519fdd67fa4d9c59eb057147aff73370430682819bb46f2991c5665312d6cc4f5fd3b07abd8d6ef12485c06e12637f445d12771c16f8a2f5dd16000480b669644c0c9f39894ade328863f649c9d372e8c15d35cd60bc0f5def2dcebf8cde88d0f2e0734c9d0b8d9195ba896e7419b2ed0ff9728396c2b2300dc1f86c2486d910e61ba357bc0a3"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x9, 0x8000], "8a743adb70a9a131a03ba64a6f0b87250b317952b9da648e087752caaf13bb04e9c1f5a8a32a01536053214b5963b277c41b6e969b67e701a71b208ec63a5546a2eb4f651850215dabd982093737c4bd93dc5552c25af90b56dad187d809342cd560144e3405e24c80036808bc0da054f55490f4c6e8d0a807b87f22833351c6bdd7bc6233339adec535c33111aa90"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "49497e872b24f91839328d89ee59608550e2818a3cf6da13788a799db1e976c994dca489ec02cca58b9278b024f28db933cbc95e054ece2fcef7221b31d7e6"}, {0x8, 0x88be, 0x3, {{0xf, 0x1, 0x24, 0x2, 0x1, 0x1, 0x5, 0x5}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xff, 0x0, 0x0, 0x1, 0x5, 0x8c}, 0x2, {0x9b, 0x5, 0x2, 0x3, 0x0, 0x0, 0x2, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x231) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}, 0x40) 20:50:14 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x640081, 0x0) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 20:50:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x900}, 0x40) 20:50:14 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x600001, 0x0) write$P9_RREADLINK(r0, 0x0, 0x10) 20:50:15 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa00}, 0x40) 20:50:15 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x600001, 0x0) write$P9_RWRITE(r0, 0x0, 0x0) 20:50:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6900, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1514.764027][T17218] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:16 executing program 4: 20:50:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb00}, 0x40) 20:50:16 executing program 2: creat(&(0x7f0000000040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000600)='./file0/file0\x00', 0x0, 0x0) 20:50:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)) 20:50:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6a00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:16 executing program 2: 20:50:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc00}, 0x40) 20:50:16 executing program 2: 20:50:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd00}, 0x40) 20:50:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe00}, 0x40) 20:50:16 executing program 2: 20:50:16 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf00}, 0x40) 20:50:17 executing program 4: 20:50:17 executing program 2: 20:50:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1100}, 0x40) 20:50:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0x11}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f00000000c0)) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') r6 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r5, 0x600, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x60}}, 0x20044040) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2, 0x1167c}, @val={0x1, 0x40, 0x1, 0xfffe, 0x20, 0x401}, @mpls={[{0x1ff}, {0x3, 0x0, 0x1}, {0xa9, 0x0, 0x1}, {0x82b, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}], @generic="229e188de084bb6f4ea402b80145662c73375449460448c24507327714245347f0759c9ae6863712d4e66fe447e045fd595c91d178d600e1ff3ca9cff51eafb2922b40baaa5a7dcd2b4b8e3078f0cabe5b70f0662133e48961223f5b11ad297d94da4853575424c8aa62ad8afe71185f63e7209c041fc7ba4b52b31001aeb628738f1930b56b10e19e462571538c1b21a87fd522f6badbdd293aa8abfc614305aa4d3d55c6a6341f032feca1d2d32f608a692dfa145e2550f909677036f5"}}, 0xe4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 20:50:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6b00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:17 executing program 2: 20:50:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1200}, 0x40) 20:50:18 executing program 2: 20:50:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1300}, 0x40) 20:50:18 executing program 2: 20:50:18 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1400}, 0x40) 20:50:18 executing program 2: 20:50:19 executing program 4: 20:50:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1500}, 0x40) 20:50:19 executing program 2: 20:50:19 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6c00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:19 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x101, 0xa, 0x4, 0x20, 0x7, {}, {0x1, 0x1, 0x67, 0x6, 0x81, 0xff, "bc7ea397"}, 0x5, 0x2, @fd=r1, 0xcef4, 0x0, r2}) fsetxattr(r3, &(0x7f0000000180)=@known='user.syz\x00', &(0x7f0000000280)='/dev/net/tun\x00', 0xd, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) write$FUSE_BMAP(r6, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x5}}, 0x18) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r4, 0x0, 0x10005, 0x0) 20:50:19 executing program 2: 20:50:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1600}, 0x40) 20:50:19 executing program 2: 20:50:19 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1700}, 0x40) 20:50:20 executing program 2: 20:50:20 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1800}, 0x40) 20:50:20 executing program 2: 20:50:21 executing program 4: 20:50:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1900}, 0x40) 20:50:21 executing program 2: 20:50:21 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6d00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:21 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x2, 0x9}, @void, @eth={@random='K\b\x00', @local, @val={@val={0x9100, 0x4, 0x1}, {0x8100, 0x0, 0x1, 0x1}}, {@ipx={0x8137, {0xffff, 0xcb, 0x4, 0x1, {@broadcast, @current, 0x1}, {@broadcast, @broadcast, 0x672}, "bd75f3007b414f1b6911fd25028d7982cd8563fa79d1ee61f88d9de6c7f6b9c58a7cbff95745afb11c54df87d489091d5dd335628bb3e3d63ad0705003d68347ac015081ce435857b6000feb609a1741e8b985392af0d019207194d4fff003fd7b3f6d47cc6baa19e9410fc9f68a099853d9eb758714d4b1261ceefadcf8f319c7d85bc6088d1de857b510d576b21635c175ee6d9b7e5ca8f7a1ae61ab12265fbe0c253ab5888054c62f81fa11"}}}}}, 0xe5) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:21 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a00}, 0x40) 20:50:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 20:50:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b00}, 0x40) 20:50:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 20:50:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c00}, 0x40) 20:50:22 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d00}, 0x40) 20:50:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 20:50:23 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:50:23 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6e00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e00}, 0x40) 20:50:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 20:50:23 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000280)) write$tun(r5, &(0x7f0000000140)={@val={0x2}, @val={0x5, 0x1, 0x1, 0x6, 0x3, 0x8}, @eth={@random='K\b\x00', @local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @remote}}}}}}, 0x3c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]}) 20:50:23 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f00}, 0x40) 20:50:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000}, 0x40) 20:50:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 20:50:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2100}, 0x40) 20:50:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:50:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3100}, 0x40) 20:50:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) [ 1523.592106][T17420] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:24 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:50:24 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}, 0x40) 20:50:24 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x4000, 0x0) r6 = socket$netlink(0x10, 0x3, 0x12) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '~\x7f\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000840}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5c, r7, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4040005) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6f00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:25 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0xfff) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:25 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400000}, 0x40) 20:50:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 20:50:25 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80ffff}, 0x40) 20:50:25 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7000, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) 20:50:26 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x40) 20:50:26 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000}, 0x40) 20:50:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:50:26 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3000000}, 0x40) [ 1525.610423][T17499] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:27 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$sock_ifreq(r2, 0x8971, &(0x7f00000000c0)={'team_slave_0\x00', @ifru_names='veth0_to_batadv\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @dev={[], 0x23}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @loopback}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 20:50:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) 20:50:27 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x20}) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', {0x7, 0x20, @private=0xa010102}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000000)=0x3f, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000180)=0x4) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000000}, 0x40) 20:50:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7100, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:50:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5000000}, 0x40) 20:50:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6000000}, 0x40) 20:50:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:27 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7000000}, 0x40) 20:50:27 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) [ 1527.054249][T17540] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=047dface) 20:50:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:28 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000000}, 0x40) 20:50:28 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xbd00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 20:50:28 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x101}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4040) 20:50:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9000000}, 0x40) 20:50:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa000000}, 0x40) 20:50:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:29 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb000000}, 0x40) 20:50:29 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0x2}, @void, @eth={@random="542b59ad2500", @local, @void, {@ipv4={0x800, @tipc={{0x9, 0x4, 0x3, 0x1, 0x3d, 0x64, 0x0, 0x80, 0x6, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xd, "179ea53ae9fc78089d7a1e"}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0x7ff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20, 0x40, 0x2, 0x4e21, 0x4e21}}, [0x0]}}}}}}, 0x4f) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$KDENABIO(r5, 0x4b36) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xbf00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc000000}, 0x40) 20:50:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}, 0x1, 0xb}, 0x0) 20:50:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) dup(0xffffffffffffffff) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:30 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xd000000}, 0x40) 20:50:30 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x1) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:31 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe000000}, 0x40) 20:50:31 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xf000000}, 0x40) 20:50:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r1 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000000}, 0x40) 20:50:32 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xff00, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:32 executing program 4: preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000002400)=""/4082, 0xff2}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x218, 0x0) 20:50:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:32 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e00)={0x38, r7, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:32 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e24, @remote}}) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) 20:50:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x11000000}, 0x40) 20:50:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:32 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x12000000}, 0x40) 20:50:33 executing program 2: getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x13000000}, 0x40) 20:50:33 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x14000000}, 0x40) 20:50:33 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffff2, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:50:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x15000000}, 0x40) 20:50:34 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:34 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffff8, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:34 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0x40, 0x3, 0x1000, {0x0, 0x7}, 0xfffffff8}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="02e9ff004b0800000000aaaaaaaaaaaa08004d00007c0000040000029078000000000000000089078e0a00000010000004443c1bd36401019957258cfc4ec1050800007fffe000000200000001ac1414aa48f0a449d5a58ef56975eeebe000000009e000000200000d60ffeffffffffffc00e0fce928d3adf4427816a1be794d00"/142], 0x8e) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 20:50:34 executing program 0: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', {0x7, 0x4e23, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x2, 0x22eb}, @void, @eth={@random='K\b\x00', @local, @val={@val={0x9100, 0x2, 0x1, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x36) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x1000000c8) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x404000, 0x0) ioctl$VIDIOC_G_PRIORITY(r7, 0x80045643, 0x0) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000040)) ioctl$TIOCL_BLANKSCREEN(r8, 0x541c, &(0x7f0000000240)) splice(r2, 0x0, r4, 0x0, 0x10005, 0x0) 20:50:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x16000000}, 0x40) 20:50:34 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x17000000}, 0x40) 20:50:34 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x18000000}, 0x40) 20:50:34 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x19000000}, 0x40) 20:50:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x1c408, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) dup(0xffffffffffffffff) r2 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r2, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) fsetxattr$security_capability(r2, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x42, 0x4}]}, 0x14, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) 20:50:35 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:35 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1a000000}, 0x40) 20:50:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffff9, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:36 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:36 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) getsockopt$inet_dccp_buf(r0, 0x21, 0x82, &(0x7f0000000180)=""/205, &(0x7f00000000c0)=0xcd) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:36 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1b000000}, 0x40) 20:50:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1c000000}, 0x40) 20:50:36 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:36 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1d000000}, 0x40) 20:50:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x7ffffffe, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e00)={0x38, r7, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4}]}]}]}, 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:38 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1e000000}, 0x40) 20:50:38 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xffffff1f, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:38 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r8, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x28e, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:38 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="020000004b0800000000aaaaaaaaaaaa08002900001c00000400000290780000000000000000000090787f0000017e93da8efa00e7f562d48197421d5a5b63a3ac6779acdeca5308ca68ba455d0e88e0f5e0aa6729f717ad7b61333a73b8861d95c9cdcddadb61d9954137c639f2fba2de71b912f98103b3024ec0321a0142bf9c5bbf9c6fd0083426728d0175738e86b1027f219ad371dabaf275289c955e3cde3e2ec3672b5eafede54d10a272c49d10794e65d549a1919f931d1aea0124012743ab924c144782e3605ff8eb0be71cda2be3c3"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x20044000) 20:50:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f000000}, 0x40) 20:50:38 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000}, 0x40) 20:50:38 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21000000}, 0x40) [ 1537.757317][T17872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 20:50:38 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:39 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x31000000}, 0x40) 20:50:40 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x77359400}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xe4ffffff}, 0x40) 20:50:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="ebfaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:40 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x0) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:40 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r5 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r5, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) get_robust_list(r5, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x400, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8a00, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@bridge_getlink={0x98, 0x12, 0x10, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0xe10, 0x200}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_CARRIER_CHANGES={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x57}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_EXT_MASK={0x8, 0x1d, 0x942}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x4801) 20:50:40 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x1, 0x3}, 'syz1\x00', 0x18}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = dup2(0xffffffffffffffff, r6) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x22c, r8, 0x800, 0x70bd2d, 0xfffff7ae, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0xc, 0x3, "f3b75daa5770e024"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "37dec3349a9caa8de6a32950ef51ba6abf282ed4b48c4c7b183d44e6db60b79c56"}}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc18}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x48df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x90}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x84}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff8bae}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ae}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe26}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x84}, 0x404) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setreuid(0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000500)='jfs\x00', &(0x7f0000000540)='./bus\x00', 0xa53, 0xa, &(0x7f0000001b40)=[{&(0x7f0000000580)="330ebbc9652af05bd562a6fb6b03099e6cf8a47820140588a8b45ef87f64f3ac3d16af8158bc13d7dab0e86a60383aca777dcd58e45e19b3807d7940b55a6ce5d158914a27624558f79068c49ea8caacc0e2b61f1b0974fc118687d788580e430be56d0c25c4254c720c094421953b2cb8501df6550b4177ab63159aaf65c6c75b3ae01943175a8d002ff1c5a22a77196c29e5955f1081fac767fe5e891d000ab0a872ba16e478281869cac35d0220f98de052bd5c4282bdd1b257cf6c1a10a78b281c4062feceaae8a9ddec4c3c6219aed13b6e7ef2987678", 0xd9, 0x9}, {&(0x7f0000000680)="fede106ef9e263e6237634235144f62c91c2a2b15bfd9dfca01f5b07114fa6e050ffebef05a46387339b96b22ffebf2dee4d504fc9ba369d71ad05900052f2f605fa396e3052797b3bbcd9742d3e7088f04ba5b6d0286019157b72f028e5a24e414eb9ab4c7df435e4b02e525176956cc5678ee15edc2a09b6f73b5cf6878e53aac1cc49d874e10c9cc2d748a075b017e5cdbae055c156ba9683021dfdc11b0e9c4399ede85fd85dabc760b58a66521586ca63eb8b", 0xb5, 0x7}, {&(0x7f0000000740)="f9b45ef1bca9061469c52fa154eec37e737ed16d7fded19450519331c05a24a69bf5e70427d4d46a3fe6f8", 0x2b, 0x28f}, {&(0x7f0000000780)="a5a0c33bdb4e39540fabfc34ec91b972bff9dd2b74f44b62bde4a13df398db910f02855d7a15fb1ccbf85971e9550a3e31a29dccf13de074d78267f2433ad1cbe43ba88d301d6d18f979616b79c62807e627f94f83c1c128e5c08f108a3da394e01a7177ac5013f35839362680be6b87f80d626c96563697d8b4671d4b6f7da8c1b5082ac05b4e3ac7154f5e7d4fc87a8031f40b4e37ff6c5cf3a75fff26fa4b4f3aed5ddefc89c1fabb57ac9421ee2e944e139d6899306b7fed6355378b928b699c7e4b011358db2408160ff64b246d18148b4ed165e8fc87bebad4c3601ed473c9", 0xe2, 0x20}, {&(0x7f0000000880)="d682c1dc52ecebf758759e053dc99e453bd621a05544ca2975805ea3518c434bbd25f78330c3bfe4da95684e6946d44d26ab05fde3575458edad6ebbb3611c6ebf3dfd498403ca186ad6a2", 0x4b}, {&(0x7f0000000900)="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", 0x1000, 0x6}, {&(0x7f0000001900)="7fa3fba044ea713c238c57862aea23f62ddf32b7ea9d68d4ff9b633ddb42555374bbf60d8895391706fee2f7dde172399a1ea676b2086d5f087acdea6cf03cb8921b2755a3ce05a762658b165691561fca47070eab28a22dc1fa6293b9e013ae410284497039d838272f911d5bcec675a26c2e8890764705deb3bf834cf2525c9aa5769f581324f4", 0x88, 0x4}, {&(0x7f00000019c0)="d74c1eaeec26e0991b9a0a85bdd09f29ac108c0d46c7e709cdbb54fbf4a2c6d2fe074876ee966c295de5ec02cec1909d18fc5cbbbe06e586c44bbefbafbf544f4b84ef0f155e", 0x46, 0x20}, {&(0x7f0000001a40)="2182f04165cb741dab33ce6b730e248ab125ebfe88bc24199ee45986fc104d4303147324c2af235dadcb8400ceb7c96327f5d3b218865dbd2d0a9da037f74e6acde3887c6947ab6c9473eb2eb7faa298708965356017dfcc0bfa0ea5894875997d124863f254123b80f7162490babf1c8ff188f288e93a0d623aaa255b4d5f6b", 0x80, 0x1896}, {&(0x7f0000001ac0)="1d073014fd44a1d8f1da47174ef46d1ef2d0995b6cb427682c7a281f7ec3d676a3f713c0bb017ca21ad9044259a488bf1599b846367fd14378824774f16b14775adcd7da5c9c37742dbdba", 0x4b, 0x8}], 0x2000080, &(0x7f0000001c40)={[], [{@permit_directio='permit_directio'}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x53, 0x5d, 0x65, 0x33, 0x39, 0x55, 0x30], 0x2d, [0x38, 0x35, 0x37, 0x37], 0x2d, [0x34, 0x63, 0x30, 0x62], 0x2d, [0x64, 0x38, 0x64, 0x34], 0x2d, [0x31, 0x32, 0x39, 0x39, 0x38, 0x31, 0x37, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@dont_measure='dont_measure'}, {@uid_eq={'uid'}}, {@euid_lt={'euid<'}}, {@subj_type={'subj_type', 0x3d, 'TIPCv2\x00'}}]}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 20:50:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffff8000}, 0x40) [ 1539.629861][T17937] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1badfaeb) 20:50:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaeb1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:40 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffe4}, 0x40) 20:50:40 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:41 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x78) [ 1540.077888][T17966] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1bebface) 20:50:41 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:50:42 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad02b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:42 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x20000100) 20:50:42 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0xd4, &(0x7f0000000100)=0x6, 0x4) 20:50:42 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) splice(r3, &(0x7f0000000240)=0x5, r1, &(0x7f0000000280)=0x10001, 0x7, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x5, 0x300, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x8080) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) socket$kcm(0x29, 0x5, 0x0) 20:50:42 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'geneve1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) getsockname(r1, &(0x7f0000000180)=@x25, &(0x7f00000000c0)=0x80) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:42 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) [ 1541.573220][T18008] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=02adface) 20:50:42 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000100)=0x6, 0x4) 20:50:42 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) chown(&(0x7f00000005c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') r3 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000800)={0x0, 0x9, &(0x7f0000000400)={&(0x7f0000000000)={0x3c, r2, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001b80)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b40)={&(0x7f0000001940)={0x1c4, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x224}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xc25c}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x197}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xb86c}, {0x6, 0x11, 0x100}, {0x8, 0x13, 0x73c}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7fff}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x3e}, {0x8, 0x13, 0xdf0}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) lsetxattr$trusted_overlay_opaque(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)='trusted.overlay.opaque\x00', &(0x7f00000018c0)='y\x00', 0x2, 0x3) syz_mount_image$afs(&(0x7f0000000100)='afs\x00', &(0x7f0000000140)='./file0\x00', 0x2e8c, 0x8, &(0x7f0000001780)=[{&(0x7f00000001c0)="2cda9cc72d08cb5028c6dc94c828e91b2c8279300248b2a45db26be299334013bc2bc21b486315a2886079d9c69f45098507", 0x32, 0xa8b3}, {&(0x7f0000000200)="141d25848103eae237776bb2851413b3b377ca68a7c917ddb2196c87bf52bfde76e09415370082b0f2a49f25605ba3e867a4d90a4193ebeddcf9e06241afdec0e17e7bcf0a5cb79abe70576670b52bdcb0cd0c7f0f52f37ea711894879196be9e29d82db1b573a23f8af3bbfbdd454235eb3c17b883f5b5c2c1ddeb3ff97ef39908a582ca588e932fbe49aa2bc6b80ef8506e7033201cead7a6e96a23ff2b9c1a2970a2067758117b7a3b395d40d92112c98134fc214", 0xb6, 0xdca}, {&(0x7f0000000400)="030c939bb67fdf0e735dfd4fa1a0aa315ba18f7bfeef8b8be03e075fccb7571886cd0b43b54b8aaa948310f9851b6d741071523c1433aea6fe79e62770a188c8b14694d94dca1c827508ae78857d6faeca457c868ab9560a95a64439d352a3dee100bb51ff7cdfeed56ccba1dc27e71c3e0e05ddc19d6762d8d892b958552bd9fbc6a062ca1712fabbd432bc02d4be44a973624d9d3c791d236bda27e75f56c6bbb49aca4c79587cac2640ebb5e9d2c729", 0xb1, 0x2}, {&(0x7f00000002c0)="1835a36a4c07e3dcd8fe1cd7f5ff98d1a0ea7a7c386922f003ea8b", 0x1b, 0x4}, {&(0x7f0000000600)="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", 0x1000, 0x80}, {&(0x7f00000004c0)="644694b02fef959607fd0714b0615e5711b6d68733968ca7cf3172f613175f67f3cb7c2c9e7fde6e57b2166ca6aba6f9b9caa3fac24327e725c850a22c82bb99673c4f4a9753451a23846a0a63405eca9da0488ee575884e638a145fc367950fe499c8533a3808a02f7f1df61b8d8150872345409b7bfe9d9d9e5f824c6526", 0x7f, 0x6}, {&(0x7f0000001600)="43b4097e0e19c53e564c5420d0ee84d625fa029ed2f34befa0ede1b36c2a2a075624b872b69f5b69507ededecdbecaf1404a03efccc0048600f5317404d0a8e21f98bb1b34a74f37a1a183274eaa2d21b35bada74770ff6c9ad663a41e39ae79c486cc2e7ffb9e1455523bfc4a4f29672be49b3bed0373c53fe38bfcbf8f22f30e40d9b28c00734dae0392289d051cb6734f271bbb5e9d1e59912cc82268659c1db08dee842f21ca45761e917421008c25afe29ed6ed3fcb95811fbdfa1eb0", 0xbf, 0x401}, {&(0x7f00000016c0)="53d281e8d520e4ae2cc2033b71e6cdbf9f8ba2622b16ec162c84b97eaba466ab8ba5055193ef7ef8fdc8917be96140ff3c024d1ff73fe1121bfcb250956a28a5c764a29d2727f5ff257a327c2713c5753ddf2fc6913cbff168c08086d5a16978098544a82f1e755c05d5ef06ce717d6a2517690a653c10fe0b834999dbb7ab338c0ffc9a55e51ffd786529d437653955c9bce9c35709cbd2db1c27e9dc", 0x9d, 0x80000000}], 0x2040004, &(0x7f0000000540)={[{@flock_strict='flock=strict'}, {@source={'source', 0x3d, ':@\xde#,)'}}, {@source={'source', 0x3d, '}'}}], [{@subj_user={'subj_user', 0x3d, '\'$,\']\x86'}}, {@seclabel='seclabel'}, {@pcr={'pcr', 0x3d, 0x1d}}]}) 20:50:42 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad14b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:42 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffd, 0x56, 0xa, @scatter={0x2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000040)}]}, &(0x7f0000000200)="f2a25fcd13df1f3120f959034f48157368e1ec640cb8b3f6bc80019829e52b4e9efbfc86b6c9fc45877cf78b2e0984ed6735a65b51a9cd6bc9e13a7250cd66f3e9ab9dd520233638f3a63bf3d7d1c87a51735727c5f8", &(0x7f0000000280)=""/194, 0x80000001, 0x16, 0x2, &(0x7f0000000380)}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000480)={0x0, 0x26a, 0x40, r0, 0x0, &(0x7f0000000440)={0x0, 0x8, [], @p_u8=&(0x7f0000000040)=0xff}}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x3fb, 0x47689a5b0bfacdd3, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004080}, 0x48015) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x521}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, r7, 0x2, [0x0, 0x0, 0x0, 0x0, 0x2000000], r6}, 0x40) 20:50:42 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000100)=0x6, 0x4) [ 1541.918689][T18028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1541.977412][T18030] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=14adface) [ 1542.017224][T18035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:50:43 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x0, &(0x7f0000000100)=0x6, 0x4) 20:50:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xd, 0x4, 0x4, 0xf0, 0x0, 0xffffffffffffffff, 0x5bec, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:43 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad15b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:43 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) [ 1542.397772][T18056] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=15adface) 20:50:43 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0xf8, 0x238, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@ipv6={@private2, @rand_addr=' \x01\x00', [0xff0000ff, 0x0, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff], 'ip_vti0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x2f, 0x97, 0x1, 0x38}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x20, 0x34}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xffffffff], 'veth1\x00', 'vlan0\x00', {0xff}, {}, 0x73, 0x8, 0x6}, 0x0, 0x108, 0x140, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x3a, 0x3, 0x3, 0x3, 0x101, 0x10, 0x8}}, @common=@ah={{0x30, 'ah\x00'}, {[0x4d3, 0x4d6], 0x400, 0x7, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2, 0x1}, 0x8000, 0xffff0001}}}, {{@ipv6={@private1, @private0, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff, 0xff000000], 'veth0_to_batadv\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x5e, 0xfb, 0x7, 0x28}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@dev={[], 0x1c}, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @local, @empty}, {0x0, 0x0, 0x0, @remote}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:43 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) 20:50:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:43 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r1}, 0x40) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$RTC_PIE_ON(r2, 0x7005) 20:50:45 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:45 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad16b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:45 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, 0x0, 0x0) 20:50:45 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r2 = dup2(r1, r0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000340)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7, @remote}, @in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x1226}, @in6={0xa, 0x4e23, 0x95, @ipv4={[], [], @loopback}, 0x5}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfe}], 0x90) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010000f6", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000100)={0x3, 0x5, 0x9, 0x0, 0x6000, 0x7fff, 0x5}) getsockname$unix(r1, &(0x7f00000004c0), &(0x7f0000000180)=0x6e) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000080)=0x80) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000380)={r6, 0x109, "befaef2a02fb7f110a2b4c604207584f96226a7f98331a8a146aefe72af538e3cf76c869d5c4ea39919566b37fb8f63e54e0d208e6c8224bdef0e78e5b2effc5590a6234c9f764b7b2ba52205b6ca7afb3751f23b258a89ce7322ea6a19d5c3828e0376d25e3657a697095398b716b7f8b95e290ce4d0c92e4c78cf3bf121c10ebb1622d3084b000c2ec587ec22062d28b15da0e13d469c3d1c83e633ce144541966f1ce1e018662a4bc9ca66a053dee67b30fe256901e12970ae1d04d38bdf335230eb8b061af9bad77ba74a107bf928e7a20dd476b41c9802c8d9396379798e8bc21a82659970f66ce301c02c460a9cdb8e9aecb9e6f86e09ad5a3fd5e6a2ddb6d7878dbb8711b16"}, &(0x7f0000000000)=0x111) 20:50:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) write$binfmt_aout(r3, &(0x7f0000000140)={{0x108, 0x7, 0x7, 0xe6, 0xd2, 0x1ff, 0x3b7, 0x35f}, "8a365da2308a81beb2b8369207ddd03a602a273217db62383f67aad5f0b087acf00cbe3526009c938ae84571ed3a6b92120aaa6b148cc2987180c23671eb333c8bf75758548fcca9d370428b07b764a438b0129576424da80906dbd83f23349952bc16380dacd4d0f09a34161345159d5f60d96ef2498fecc6efbdb6d94f5e1081de7d2108a682d08d32032d0eda36da502f2750833e10e54ffc4fd3778a55cdf721f472a5", [[], [], [], []]}, 0x4c5) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x2}, @val={0x5, 0x80, 0x5, 0x81, 0x0, 0x8}, @eth={@random='K\b\x00', @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x38) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:45 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x50}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4008801}, 0xc000) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1544.455195][T18127] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=16adface) 20:50:45 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100), 0x4) 20:50:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) r1 = accept4(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x18}, 0x4) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:45 executing program 2: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd4, &(0x7f0000000100), 0x4) 20:50:45 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad17b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:45 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) fsmount(0xffffffffffffffff, 0x0, 0xa) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1544.813686][T18150] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=17adface) 20:50:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:46 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:46 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad18b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:46 executing program 5: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000640)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0x0, 0x80000000, 0x3d08, 0x0, 0x40, 0x0, 0x1, 0x8001, 0xf411, 0x0, 0xffffffffffffffff}) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000202010800020000000000000200000008000540f20000000508e70340000080"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2000c091) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x5) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000002c0)=0x38, 0x4) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000380)) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000300)={0x2, 0x1}) [ 1545.221768][T18168] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=18adface) 20:50:47 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x4) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad19b83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:47 executing program 5: ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) fsmount(0xffffffffffffffff, 0x0, 0xf6) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x9, 0x4, 0x2, 0x4, 0x80, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 20:50:47 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:47 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @val={0x2, 0x0, 0x6, 0x8001, 0x2000, 0x401}, @eth={@random='K\b\x00', @local, @void, {@canfd={0xd, {{0x1, 0x1, 0x0, 0x1}, 0x22, 0x2, 0x0, 0x0, "d36a40cca8b47b9192ad2da8575789fb7b01c1d5faf1a39827f8638342a1ec3d7dc22f06b9159ad17eaec518b9a8b17f3fd2e6f2a93f537d34f89a632a49fd97"}}}}}, 0x64) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r1, 0x1000000000015) [ 1546.235464][T18194] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=19adface) 20:50:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r1, 0x1000000000015) 20:50:47 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x980000, 0x3ff, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990968, 0x3, [], @p_u32}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) write$P9_RCREATE(r1, &(0x7f0000000140)={0x18, 0x73, 0x1, {{0x10, 0x1, 0x2}, 0x10000}}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x1ff, 0x18, 0xffffffffffffffff, 0x8, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:47 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1ab83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:50:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r1, 0x1000000000015) [ 1546.687177][T18233] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1aadface) 20:50:48 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:48 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fadvise64(r0, 0xef, 0xa3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:48 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1cb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:48 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1547.740809][T18261] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1cadface) 20:50:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:48 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x6, @private0, 0x3}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@hoplimit={{0x14, 0x29, 0x34, 0xb4e}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2f, 0x2, [], [@hao={0xc9, 0x10, @private2}, @pad1]}}}, @hopopts={{0x28, 0x29, 0x36, {0x2f, 0x1, [], [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @dstopts={{0x68, 0x29, 0x37, {0x32, 0x9, [], [@jumbo={0xc2, 0x4, 0x1f}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x20}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x108}, 0x50) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:49 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1db83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1548.163429][T18289] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1dadface) 20:50:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r2, 0x1000000000015) 20:50:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000841) 20:50:51 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1eb83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:51 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x648800, 0x0) [ 1550.209673][T18314] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=1eadface) 20:50:51 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad3db83c000040dc", 0xff0f}], 0x10, 0x0) 20:50:51 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x10400, 0x0) fsmount(r1, 0x0, 0x7264c442db90845f) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x401, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1550.495053][T18330] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=3dadface) 20:50:51 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0x800004, 0x41c, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], r2, 0xffffffffffffffff, 0x1, 0x2}, 0xfe8d) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) 20:50:51 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad4eb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1550.712145][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1550.771685][T18339] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=4eadface) 20:50:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad7eb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1551.030204][T18349] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=7eadface) 20:50:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:52 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaadebb83c000040dc", 0xff0f}], 0x10, 0x0) [ 1551.418206][T18362] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=ebadface) [ 1551.498179][T18337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:50:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r1, 0x1000000000015) 20:50:55 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x10000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x1001e) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$IOC_PR_PREEMPT_ABORT(r5, 0x401870cc, &(0x7f0000000080)={0x7, 0x8e, 0x10000, 0xffff}) ioctl$SNDCTL_DSP_SETDUPLEX(0xffffffffffffffff, 0x5016, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x542, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:50:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b0f02000040dc", 0xff0f}], 0x10, 0x0) 20:50:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) write$tun(r5, &(0x7f0000000200)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x107, 0x0, 0x400, 0x0, 0x2, 0x0, @broadcast, @empty}, {0x0, 0x0, 0x0, @loopback, "55acdb71abbb60ae19650ff5d6604f7716d0f8462521dfb2c19429117e485cbbf0bb621d4d9e2399463c8ede3cb618eb3c6474477b7411f222984639afca99a65482a121e25823c78f0e79206e56a3cfc03281f169a9112b0c191ff20436ef3cec5cd2f2ef666de16e02a223869c2da7d72a91988a93e2e65dc579f3fb4f84ae24f6e106687a8c702c39e9486d12294f3f2284c49fab47a720a6250a7e403da92056198d930b86976e7f2be8459aaf3ec5ed20327f8101b6a2bd04b20c586ec4f1cad0a114914b54c2be3fcf31b3458916be07de07c6cc973cf6dc7362332c7db81383fba3e7650143c084"}}}}}}, 0x119) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:55 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8084) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x24, 0x4, 0x0, 0x0, 0x20a, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x2b, 0x76, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010100]}, @generic={0x88, 0x2}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xe8, [@broadcast, @dev={0xac, 0x14, 0x14, 0x25}]}, @ssrr={0x89, 0x17, 0x6f, [@rand_addr=0x64010101, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}, @rr={0x7, 0x7, 0x30, [@rand_addr=0x64010102]}, @rr={0x7, 0x1b, 0x98, [@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @noop]}}, {0x0, 0x0, 0x0, @loopback, "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"}}}}}}, 0x21c) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1554.165396][T18388] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1554.179623][T18388] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1beb3c000040dc", 0xff0f}], 0x10, 0x0) 20:50:55 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f0000000100)=""/233, 0xe9}) [ 1554.427102][T18407] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:50:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b40dc000040dc", 0xff0f}], 0x10, 0x0) 20:50:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) tkill(r1, 0x1000000000015) 20:50:55 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_ENDIAN(0x14, 0x0) [ 1554.702180][T18420] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1554.720025][T18420] BFS-fs: bfs_fill_super(): Impossible last inode number 874 > 513 on loop3 20:50:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb809000040dc", 0xff0f}], 0x10, 0x0) 20:50:55 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x5, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r0, 0x0, 0x4}, 0x40) [ 1554.969606][T18430] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:50:56 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)={0xf, 0x4, 0x1000004, 0x4, 0x0, 0xffffffffffffffff, 0x40, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x140f, 0x2, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'cma\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 20:50:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83d000040dc", 0xff0f}], 0x10, 0x0) [ 1555.230404][T18444] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:50:57 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb84e000040dc", 0xff0f}], 0x10, 0x0) 20:50:57 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1404, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x100004, 0x4, 0x6, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r1, 0x2}, 0x40) [ 1556.211140][T18459] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:50:58 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f0000000180)={0x80000000, 0x0, [], {0x0, @reserved}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:50:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:50:58 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x1, 0x0, 0x2, 0xc7c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xe8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xa0102, 0x0) write$binfmt_aout(r5, &(0x7f0000000140)=ANY=[], 0xffffff78) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000000000000130008f4b2c200854fd873"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r6, 0x541b, &(0x7f0000000040)) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x3f, 0x2fba, 0x4745504d, 0x1, 0xb, [{0x5, 0x8}, {0x7fff, 0x101}, {0x8}, {0x101, 0x100}, {0x7, 0x4}, {0x1f, 0x10001}, {0x1, 0x1}, {0x2, 0x80}], 0x46, 0x5, 0x4, 0x3, 0x1}}) 20:50:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb8eb000040dc", 0xff0f}], 0x10, 0x0) 20:50:58 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000040)=0x6) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_ifreq(r4, 0x8932, &(0x7f0000000280)={'team_slave_0\x00', @ifru_flags=0x800}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x6, 0x401, 0x1f, 0xfffffff7, 0xa, 0x9, 0x1}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x6}, &(0x7f0000000240)=0x8) chroot(&(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x48, 0xffffffffffffffff, 0x9, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000}, 0x40) 20:50:58 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$l2tp(0x2, 0x2, 0x73) dup2(r5, r6) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2e) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7, @ANYRES64=r2, @ANYRESOCT=r2], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1557.458057][T18473] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1557.495227][T18473] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c020040dc", 0xff0f}], 0x10, 0x0) [ 1557.637200][T18493] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1557.645008][T18493] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c030040dc", 0xff0f}], 0x10, 0x0) [ 1557.887399][T18504] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1557.907330][T18504] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c040040dc", 0xff0f}], 0x10, 0x0) [ 1558.203878][T18511] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1558.218381][T18511] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c050040dc", 0xff0f}], 0x10, 0x0) [ 1558.444753][T18520] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1558.468768][T18520] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c060040dc", 0xff0f}], 0x10, 0x0) [ 1558.646832][T18524] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1558.662036][T18524] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:50:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c070040dc", 0xff0f}], 0x10, 0x0) [ 1558.912531][T18531] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1558.926686][T18531] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:00 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000000c0)="cc0ade967ab782df8384953d05", 0xd, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$describe(0x6, r5, &(0x7f0000000180)=""/85, 0x55) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:51:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f0000000000)={0x800, "75dcee550c09b10129b19d67e75026321d04a35838bc27ec69c8ba9192037e69", 0x1, 0x1}) 20:51:01 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1d4) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 20:51:01 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 20:51:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c080040dc", 0xff0f}], 0x10, 0x0) 20:51:01 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000080)=""/133) [ 1560.677712][T18556] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:51:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1560.722633][T18556] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:51:02 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x2, 0x5, 0xea, 0xfd52, 0x4}) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:51:02 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000430800000000aaaa2aaaaaaa08084500001c030000010046ce4f7a4142e4000000000090787f0000010000000000000000"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x1) 20:51:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c090040dc", 0xff0f}], 0x10, 0x0) 20:51:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:51:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(0x0, 0x1000000000015) 20:51:02 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x200400, 0xc1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3, 0x6}, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1561.292400][T18595] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1561.319331][T18595] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1561.517143][T18608] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:51:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0a0040dc", 0xff0f}], 0x10, 0x0) 20:51:03 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 20:51:03 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x2}, @void, @eth={@dev={[], 0x41}, @local, @void, {@ipv4={0x800, @igmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty, {[@lsrr={0x83, 0x9, 0x63, [@rand_addr=0x64010100, @empty]}, @noop]}}, {0x14, 0x0, 0x0, @loopback}}}}}}, 0x3a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x5c}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 20:51:03 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup(r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x6b8) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002e00)=ANY=[], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc110000", @ANYRES16=r0, @ANYBLOB="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"], 0x11bc}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1562.745305][T18634] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1562.759293][T18634] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:03 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002480)='/dev/vcsa\x00', 0x200000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r8, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x68, r8, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x1) accept4$tipc(r5, 0x0, &(0x7f00000000c0), 0x180800) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0c0040dc", 0xff0f}], 0x10, 0x0) 20:51:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) 20:51:03 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) 20:51:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r1, 0x1000000000015) [ 1563.113886][T18661] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1563.165056][T18671] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1563.210534][T18661] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0d0040dc", 0xff0f}], 0x10, 0x0) 20:51:04 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x1000, 0xffff}) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) fsmount(r1, 0x0, 0x84) accept4$unix(r1, &(0x7f0000000100), &(0x7f0000000080)=0x6e, 0x80800) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:51:04 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) [ 1563.430696][T18681] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1563.439426][T18681] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c0e0040dc", 0xff0f}], 0x10, 0x0) [ 1563.693215][T18691] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1563.741755][T18691] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1563.766675][T18696] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:51:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c100040dc", 0xff0f}], 0x10, 0x0) 20:51:05 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="02008b77f573a9abec5d76d9ea33708200004b080000fdffaaaaaaaaaaaa08000000001c00000400000290780000000000000000000090787f0000012fbcb43f8272b3b3d3bc311a237343bd4dd7e72629876ee5e5709020ee03ea5c186e7e083c4434ed2c6b19ae6ace499e43a6c962ed2ab8dcd3bae682823c98ed03d4f986d48775976a12ecdc15babf2fc9918100000050652066ae8db2713b013239127daf35694a47c7f22d7ab1b294a8c892355c68a8c92e1132c55c44f0681fb76622"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80800) 20:51:05 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) r5 = socket(0x11, 0x800000003, 0x0) fstat(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x8, 0x6}, {0x78, 0x5}], r6}, 0x18, 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:05 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x202000, 0x0) r1 = open(&(0x7f0000000580)='./bus\x00', 0x60102, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="34aa373113a7d2611ff5bcb5ba8aca4538ae3f5cee7ee1ae7fbc7ab62a02c3a26f6e1d08d2cf709806a01991438dc402b094", 0x32}, {&(0x7f0000000240)="7b3748f5ddda0e263ec2b4d4742f8c22f84a3fa9957614111cf4dc746584b1d88605bcadbc7f379ff1e13a24c4a42ec84b9d622031575909c12febddc5019495ab6640e0a9734a35fa904e9d246fb7992fa6edcfc2226f39a9c77000f32f894b6e347070bc9b5ae1f3efaee27cfcb9cfeffdb94e019939986daa318142267e3289632f6dcf48f2495c36ec055157019b76df22723ff6b7073d14bc17df4519e0f1e9eaa84ab8c6d3089415b4015d6fabe6916e628012e11abd3d67427dc3ae497e456e8735f3aea26582732dc868a92952a5d2204ff78ef592db3b", 0xdb}, {&(0x7f0000000340)="26903707b092580bc5ebae5a2b143f269b327d28a4e9fe3162c175ccd847fe908795ebbf2f438a891122d84cdcce2a774564b533b20a308de36766f99be4ee6e95b09c29990d56a728d3bd3e41e6bee22dc3c3558a362c582f6b1623e959c62b12cb465fcc099120357be42efad3e1cc68f4a6ad7026195a24c75d56dcfefcdedffcdc8bb43eee8b6af66e7b02dba398f1e285815614a6640ca3e521bba537360928ef4a634e49e41eab8c8aee42672a2e3f816b33550b0bc750b86ce94c2634fa30c92f2a9c8d33cbbac9bf7e02eade2b4ceb446777fd407650716efae9961eb55a09315e3397f17aad2f248aaa56d1c3", 0xf1}, {&(0x7f0000000440)="258705e720ff7b961bf61b1c9b30020d4692d89be88d2d9ed81ed0153432d05148181f7561e06f82e85c04ec4573dfb8dbb46815332bdee52530cdbca528b8de34b06d65137cfe030a99e064cf87db21cedd12636307a5982e451c20823d83fd488fca0b61b39d0277ef251ad1aca471d447b1e283322fb8925777cffee23cde656c232363c23fe6df8f4d33a7e32cefa24e0127806389122b502e8801d7461c354ab4029d87eb4bf0675f557077e7412f1293de03fd8520457f4a65", 0xbc}], 0x4, 0x5) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000040)={0xeb6e}) gettid() r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000640)=ANY=[@ANYBLOB="02a55f00"]) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000600)={0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x5, 0x4, 0x6, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000}, 0x24) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000007c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x101f03, 0x0) [ 1564.666985][T18725] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1564.690283][T18725] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:05 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c140040dc", 0xff0f}], 0x10, 0x0) 20:51:06 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 20:51:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80040, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:51:06 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 1565.030398][T18749] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1565.071411][T18749] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1565.106751][T18754] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:06 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x2c8480) 20:51:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c1e0040dc", 0xff0f}], 0x10, 0x0) 20:51:06 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}, 0xe91, 0x6, 0xfffffff8, 0x400, 0x80, 0x0, 0x3}, 0x9c) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1565.421155][T18764] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1565.439447][T18764] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1565.576953][T18770] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:07 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000000c0)={0x9a, 0x804d}) close(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c230040dc", 0xff0f}], 0x10, 0x0) 20:51:07 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x68, r7, 0x5, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) 20:51:07 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="370000004b3026396cbc7ca79846b1e4710e444a3cebdeb0c82fb8b5dd621f486d183a0c16c9a8a4f5339b73348faf3ea6e41767e726d1fa1bf277a4834cc6a5b1adec0389db607ea0b875da1737966e5790134be61b891c77ee9bb0debd53dd6e9387a4e018fd1736d42745d5883cc649672599d5389b36269248bf91f82044f5d70dbef9cbe7a1610600b397f7ba2ade828a5544e4a75b2958cb63109c40a66818e84f74bdc01335e4caf182f76ec96b6a0c2d96dcc05c30dd4ac95c34832e61a8e4a922c90db9a6fe6f7b5e856102b7fd6671ac495ab342fed6200e1a646305dae7b36a9c9d0b912b2068393b29fac1bf67dbd06f1e713f3ad38324689239"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000001214040026bd7000fddbdf2508004f000500204b6fadbf69ab210000080001000000000008001500ffff000008004b001700000065480fd8e9db285af7ced1ae3057e183a1e16cbd94adee26c1e64405e3cd84ffeb2354cadc2c27a2411c86e8b21a3ce18aa98d7c552de00b50b5bbed9a8b4c74c735d1abab6b3fbada9c72916e559abfc5981e1f0046da2ea15ce275294819d63fa0ca2f79e8c956f65d6f69f5d1a4f3c2d7c249143549810417d980cfafc35911ebd70d31b81c277720068adfbd68f7f5e0d030443dd72e3d"], 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4000804) 20:51:07 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) socket$alg(0x26, 0x5, 0x0) [ 1566.295121][T18786] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1566.332605][T18786] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:07 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c340040dc", 0xff0f}], 0x10, 0x0) 20:51:07 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bind$bt_sco(r0, &(0x7f0000000180), 0x8) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000003c0)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000140)={0xed5e, 0x9, 0xff, 0x401, 0x10, "34a8290ca4697fdc58aad412f22ee8f187cb74"}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1411, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x804) fsmount(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000400)='./bus/file1\x00', 0x20000, 0x4e) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000000000010000000000000008410000004c00180000000069620000000034000000000000000000000000000000000000000500"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c1) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x40) 20:51:07 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 1566.823336][T18820] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:51:08 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x6, 0x4, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x1}, 0x40) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="759bfa857f9d15e4f7232c54a4b199ee6de5d098e74961fa1473a3e243769e2fce7abedc36750e3e8023c6a7cfe974ac0fd8d05bfcb23074c609ec15d1235e3d00913d39bf5c14b1695f9eb4d07c9f91683a7d08961e63e83dc0a60cd21a72e81059900827edd4616e1b4b512be6a3d73369b38d916d98618af001d0799c14b234c563dd78e08067c8d01c8cecec409cdac75be19997bd2630c4a53ffb5b60b4c4c5592da35bf9fccf56b6902d303f4d506446937bca65147610e59033f15ac83caaef7014fd", 0xc6}, {&(0x7f0000000080)="711afb05", 0x4}, {&(0x7f0000000100)="3e8db11fb143e181b6510adf46a02b7d674439bb81b324eab40fd07ef30dde701a4930cce60395a7946e1b9b8393c5588b4b586149c76e24b53bac02cfd6fe2f0258597e9e8189b0c5a304b1de8a3a7f05a7dd6cbb82943194ede4277292819a694abe7c51154f7cb4476d803a7986c593d3ae990acdcba8e7c76a147210df26cde69be19e0770288483684f176c7be9d8dc5371690dbfe3db088885dae53da08dde4a0a64b872923cde84d53d22bac2feae8314d54efdbb61c3915728c06a", 0xbf}, {&(0x7f0000001300)="a91b5c472db3a66312691c2e6661ff12d1011083546b8a75e9d24bdb8ef40b40e2315882218e751442f27f1f5aa177039ce4722bdc8bc293d1d8df4a6d6255c4ad4ecbaba3d39a961effe8f9b942546a623c8b5f94d5788e7286d6b8dde67fc124d291e66a99064df5cdac13afb920ba754d9693ee1a2020f5acc5e6c01e49b47f290702042860ab0d96172e02441f75fdd9262eb9548a4ca71e9e58f258", 0x9e}, {&(0x7f00000013c0)="7edbc4fa0bf9c4be5166340d77747e26768284ae84372af9e8611f0bdbc31eb9cc9ffc6a7651116dfd9886d754c2c76c1b7fb3eb674cb1d80d00b05be9cea8743abbca07d3567e", 0x47}, {&(0x7f0000001440)="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", 0xfc}, {&(0x7f0000001540)="973a2f6090ab1530bd4ffc9bc13aa65d5d7e137e56d9c80d96cff0ab392383c1ce4577629d4968154d93ada98b2f634b735aadca51cd297670e79a7d1a7b932e4f61a598abeeed8475df574799b3b75da12a5e517d98a6adc291bf206e2f95a39092e5f43c8e40667b50c6ef2a0e1b8d0bdf940740d0d4fe6d5cffb8d0b5203e39528a95a6dab25d7e28b4103a83f01a4a6f2b78e18e0a464b4f19574e32af5d42588cd802ba4bc01cf4876af7fcde90730b8103c177", 0xb6}], 0x8, &(0x7f0000001940)}, 0x4004000) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) [ 1566.873866][T18820] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1566.909945][T18826] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c480040dc", 0xff0f}], 0x10, 0x0) [ 1567.250506][T18837] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1567.283218][T18837] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:09 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x80000, 0x0) splice(r4, &(0x7f00000000c0)=0x2, r5, &(0x7f00000001c0), 0x80, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x8, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x244900, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0000000}) 20:51:09 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) time(&(0x7f00000004c0)) 20:51:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c4c0040dc", 0xff0f}], 0x10, 0x0) 20:51:09 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x787502, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r6, r7}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) keyctl$dh_compute(0x17, &(0x7f00000002c0)={0x0, r5, r6}, &(0x7f0000000300)=""/173, 0xad, &(0x7f0000000500)={&(0x7f00000003c0)={'rmd256\x00'}, &(0x7f0000000400)="2ce2f2804dc979099d8aa046608bb3cbab716775b88a55d591d63362321011bc01245060183ec415725e00f7454f82eb4ee0320dabc9836f07067ea24d9dd30beb7c7265906f6f35db3545c467b042bba8c5246287ab00d86e7c0f8cb0cc527b664feacaa200dba24fd71623a46edb6270bd16d525500654d02a7efe0c3192a26343787661fae57b98c0fb886c51bc693325fc9bde0901a811bad7580d399d64a07b4336350bbfa30ce34f07156c326931d74c53bfc82851bf90373df2632c90f84ca90b4bf7692619f24bf7c489adec0fa3683e63d57add2359fb5886", 0xdd}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0xc02, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x9000}, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1568.086660][T18852] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1568.094179][T18852] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1568.135888][T18857] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:09 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x70) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @multicast2}, @l2tp={0x2, 0x0, @private=0xa010102, 0x4}, @nl=@unspec, 0x7, 0x0, 0x0, 0x0, 0xbed8, 0x0, 0x200000}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x9a0000, 0x0, 0x6, r1, 0x0, &(0x7f0000000000)={0x9a0908, 0x4, [], @ptr=0x2}}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x15) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) write$binfmt_aout(r3, &(0x7f0000000200)={{0xcc, 0x1, 0x80, 0x265, 0x397, 0x8, 0x1b3, 0x7}, "c88a34ccd6a563c2b0e12706a1193180d32a4cf85a6c9d8668b0abb733b641f76557cc1a10bd3deb078ad57efc750985a6300ce48fc5a7516d505ff9a980e387894aa04c7100eec857de48fcc3f7be597244b2745c8da5d92cac33225d6dbba3d61e386610eca903d94e9281432869ac03d4a145257d612ca6b48806434cbd1301580b60506a3627ceece4005dff4d4427a1a1d0df7a16997c43d2fd4ae5f09aa8835a061744e3942776c836a1f10b10ff3ec14e9dcdaeccfc", [[], [], [], []]}, 0x4d9) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) 20:51:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c600040dc", 0xff0f}], 0x10, 0x0) [ 1568.375821][T18877] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1568.393184][T18877] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c680040dc", 0xff0f}], 0x10, 0x0) 20:51:09 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000080)={0x3ff, 0x2, 0x9}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x9a0000, 0x0, 0xffffffa6, r1, 0x0, &(0x7f0000000100)={0xa40a7f, 0x1ff, [], @value=0x5}}) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0xb33, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x20c, @time={0x81, 0x5}, 0x1, {0x2, 0x56}, 0xad, 0x2}) [ 1568.673216][T18882] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1568.680783][T18882] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:10 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:10 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:51:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c6c0040dc", 0xff0f}], 0x10, 0x0) 20:51:10 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000540)="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", &(0x7f0000000000)=@udp6=r2, 0x4}, 0x20) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x2, &(0x7f0000ffc000/0x3000)=nil, 0x2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x1000) 20:51:10 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsu\x00', 0x2, 0x0) 20:51:10 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r6}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0x19}, 0x2}], 0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000180)={r9, @in={{0x2, 0x4e20, @multicast2}}, 0x1, 0x9e0f, 0x7, 0x1, 0x7}, &(0x7f0000000240)=0x98) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1569.927488][T18908] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:51:11 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:11 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x9, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) write$tun(r7, &(0x7f0000000200)={@void, @void, @ipx={0xffff, 0x3e, 0xa2, 0x1, {@broadcast, @current, 0x101}, {@broadcast, @current, 0x7}, "82228d66f9ba13fedd60953e0a7f2500000026c99ef549170336b7aff99e439a"}}, 0x3e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1569.972268][T18908] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:11 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x3c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x7c, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40408c0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) 20:51:11 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:11 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c6e0040dc", 0xff0f}], 0x10, 0x0) [ 1570.158514][T18923] F2FS-fs (md0): Unable to read 1th superblock [ 1570.188120][T18923] F2FS-fs (md0): Unable to read 2th superblock 20:51:11 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x0, 0x2}, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1570.349049][T18941] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1570.369099][T18941] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1570.431323][T18952] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c740040dc", 0xff0f}], 0x10, 0x0) [ 1570.539062][ T7950] usb 2-1: new high-speed USB device number 33 using dummy_hcd 20:51:11 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="370000004b3026396cbc7ca79846b1e4710e444a3cebdeb0c82fb8b5dd621f486d183a0c16c9a8a4f5339b73348faf3ea6e41767e726d1fa1bf277a4834cc6a5b1adec0389db607ea0b875da1737966e5790134be61b891c77ee9bb0debd53dd6e9387a4e018fd1736d42745d5883cc649672599d5389b36269248bf91f82044f5d70dbef9cbe7a1610600b397f7ba2ade828a5544e4a75b2958cb63109c40a66818e84f74bdc01335e4caf182f76ec96b6a0c2d96dcc05c30dd4ac95c34832e61a8e4a922c90db9a6fe6f7b5e856102b7fd6671ac495ab342fed6200e1a646305dae7b36a9c9d0b912b2068393b29fac1bf67dbd06f1e713f3ad38324689239"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth1_macvtap\x00', {0x1}, 0x1000}) [ 1570.579405][T18957] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1570.596875][T18957] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c7a0040dc", 0xff0f}], 0x10, 0x0) [ 1570.793258][ T7950] usb 2-1: Using ep0 maxpacket: 16 [ 1570.867100][T18965] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1570.882170][T18965] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1570.923728][ T7950] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1570.947916][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.972057][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.997832][ T7950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1571.021816][ T7950] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1571.037398][ T7950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:51:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c7e0040dc", 0xff0f}], 0x10, 0x0) [ 1571.083823][ T7950] usb 2-1: config 0 descriptor?? [ 1571.221393][T18975] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1571.267467][T18975] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1571.288363][T18971] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{0x5, 0x5, 0x4, 0xe29}, 'syz0\x00', 0x17}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x2a) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:12 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = socket(0x11, 0x800000003, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) statx(r2, &(0x7f0000000200)='./file0\x00', 0x800, 0x80, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x11, 0x800000003, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="2a24ec847e7da9553d3d1b246f8cfeec2e976bf1d5c956f376568e167f1264aae7d1ee2652c0904ba6c7556a9c152a63d45be920013c98b3eaf94bd5cf25115c7489c9ce28daae09e036aa48fe5af546c5d8412807c155b4c8e8680463296cf4d84b7d2c7a4c4a0be03a4c1f98881dd2890c736f9faacca030967c0a2cd7ab1d94dd7ee58b2c9f585e0ed067a9875e617fc4a7c66ef78a69d468a93377cc1162bd09d6b0a3051bf5a547a1263550f7e5a43b18292bef51845bc2d047f5ed405865d2c263a52f0fcbf82c", 0xca, 0x4}], 0x8024, &(0x7f00000003c0)={[{@flock_write='flock=write'}, {@autocell='autocell'}], [{@fowner_gt={'fowner>', r5}}, {@fowner_gt={'fowner>', r1}}, {@euid_eq={'euid', 0x3d, r3}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_type={'obj_type', 0x3d, ':]\'.\\'}}, {@dont_hash='dont_hash'}]}) [ 1573.153252][ T7950] usbhid 2-1:0.0: can't add hid device: -71 [ 1573.159358][ T7950] usbhid: probe of 2-1:0.0 failed with error -71 [ 1573.178814][ T7950] usb 2-1: USB disconnect, device number 33 20:51:14 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) perf_event_open(&(0x7f0000000b00)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='f2fs\x00', 0x9, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x80, 0x0) write$tun(r7, &(0x7f0000000200)={@void, @void, @ipx={0xffff, 0x3e, 0xa2, 0x1, {@broadcast, @current, 0x101}, {@broadcast, @current, 0x7}, "82228d66f9ba13fedd60953e0a7f2500000026c99ef549170336b7aff99e439a"}}, 0x3e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000340dc", 0xff0f}], 0x10, 0x0) 20:51:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xc, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x6, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) 20:51:14 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) 20:51:14 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x111402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0200e0ff4a0800000000aaaaaaaaaaaa08004500001c00000400000290780000000000000000000090787f000001"], 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) socket$rxrpc(0x21, 0x2, 0x2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) 20:51:14 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 1573.455521][T19018] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1573.499622][T19018] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x12, 0x4, 0x4, 0x4, 0x32, 0xffffffffffffffff, 0x80800, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}, 0x40) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L-', 0x9}, 0x16, 0x3) [ 1573.577467][T19028] F2FS-fs (md0): Unable to read 1th superblock 20:51:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83cf60340dc", 0xff0f}], 0x10, 0x0) [ 1573.621311][T19028] F2FS-fs (md0): Unable to read 2th superblock [ 1573.687355][T19039] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1573.699372][T19039] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:14 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000280)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="0000100000000000170000000b0001006367726f757000003c0002003800038008000100001000002c00028014000100000002"], 0x6c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) [ 1573.781406][T19045] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83cf70340dc", 0xff0f}], 0x10, 0x0) [ 1573.861568][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.893041][ T7950] usb 2-1: new high-speed USB device number 34 using dummy_hcd 20:51:15 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) socket$inet_udp(0x2, 0x2, 0x0) [ 1573.928913][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.953768][T19056] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1573.961354][T19056] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83cf80340dc", 0xff0f}], 0x10, 0x0) [ 1574.013868][T19049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.038807][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.112863][T19070] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1574.119945][T19070] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 [ 1574.132327][T19074] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1574.132829][ T7950] usb 2-1: Using ep0 maxpacket: 16 [ 1574.313867][ T7950] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 1574.332915][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.358448][ T7950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.382086][ T7950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 1574.397121][ T7950] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1574.407213][ T7950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.420027][ T7950] usb 2-1: config 0 descriptor?? [ 1576.532875][ T7950] usbhid 2-1:0.0: can't add hid device: -71 [ 1576.538995][ T7950] usbhid: probe of 2-1:0.0 failed with error -71 [ 1576.575130][ T7950] usb 2-1: USB disconnect, device number 34 20:51:17 executing program 5: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xf, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x40) 20:51:17 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000300)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000000f06030000000000000000000300000000000000000000004fd8bf331292474a736059776d72e7fc54c99caaf895d76ead939a2fc389f30ddc3b22202ba14a41621b226f1f7775e8b3a0c2a81bf75560c6962469a2be838877b91898fe0dd8dd41dba66deecc4174f72263018270fa8b1e7df31238ddac538b4c60062afee3d5f67741a06acb04ebf67dcfcd9265d4fc6e9eace500e6a85cbcb6569100bfe6d6004db5b6aed6abe7447c6ae31f8c10dada920433763223be970528c1da4321439b9a4ae031904b06a156bab76f43186895c37cf17830a01d69637a6d763d17f4a2ad86ce190ca508cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x20008844}, 0x40804) 20:51:17 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @val={0x1, 0x80, 0xfa, 0x3, 0x1000, 0x8}, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @dccp={{0x1d, 0x4, 0x1, 0x39, 0x106, 0x65, 0x0, 0x2, 0x21, 0x0, @loopback, @local, {[@noop, @generic={0x83, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x6e, 0x3, 0x4, [{@multicast2, 0x7fff}, {@remote, 0x6}, {@broadcast, 0x7f}]}, @generic={0x7, 0x6, "f7ea8d23"}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x8, "ae0b30fa0553"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x3, 0x53}, @cipso={0x86, 0x28, 0x1, [{0x1, 0x12, "f8793cef9b363d0a09605c4e21b06943"}, {0x5, 0x10, "dd3cbef34d5f90ef7b13224961aa"}]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x1, "4b8b00", 0x20, "c7ae36"}, "0a3861f665fc3d41adf1266594bccc16f6f25785aa4a7644fbdb7b4cff1be0132fb1f0b85822e3ba3437e3f7eee1e92482a460a1eff531d7ca0e1006df007bd9647259bae0cc727d7142a595cc971e3b662648e0de7cceb5d9d8ee093306572f16af32365c63952d9f3dc1adcfa7e1adaab5260bc095a3530a5bd8b2ccc44f2d9c20"}}}}}}, 0x122) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 20:51:17 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x10, 0x0) 20:51:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c220440dc", 0xff0f}], 0x10, 0x0) 20:51:17 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) 20:51:18 executing program 2: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x1000000000015) [ 1576.944290][T19109] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1576.963343][T19109] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c710440dc", 0xff0f}], 0x10, 0x0) 20:51:18 executing program 4: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hidraw(&(0x7f0000000100)='/dev/hidraw#\x00', 0x80, 0x40) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0)='l2tp\x00') sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="600000000009010100000000000000000200000308000640000000000900010073797a300000000008e50240000000090c00048008000140000002000900010090797a300000000008000340000000050e000540000000ee0800054000000008"], 0x60}, 0x1, 0x0, 0x0, 0xc040}, 0x8890) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 1577.033533][T19124] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 20:51:18 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @loopback}, @nl=@proc, @nl=@unspec}) dup3(r1, r4, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000000)={'hsr0\x00', {0x7, 0x4e24, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x2}, @void, @eth={@random='K\b\x00', @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x400, 0x0, 0x2, 0x0, @private, @empty}, {0x0, 0x0, 0x0, @loopback}}}}}}, 0x2e) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 1577.229654][T19132] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing 20:51:18 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, 0x4, [@default, @bcast, @null, @default, @null, @default, @default, @null]}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) fsmount(r1, 0x1, 0x88) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000400)=@random={'osx.', 'GPL\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="85000000070000003500000000000000850000000700000095000000000000009f5fa7cd462cb7a2885e3ad087881cd01c40dbf7f54efa9f87b3ed349e7bbe02ba8e2355abb04e340000000000000002d7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff18}, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={r4}, 0xc) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xfffffffffffffe43) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r6}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r6}, 0xc) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000080)={{r7, r8+10000000}, {0x77359400}}, &(0x7f0000000180)) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x6, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0xffffffffffffff9f) [ 1577.273702][T19132] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop3 20:51:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}}, {{}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c720440dc", 0xff0f}], 0x10, 0x0) [ 1577.488985][ C0] ================================================================== [ 1577.497497][ C0] BUG: KASAN: out-of-bounds in csd_lock_record+0xcb/0xe0 [ 1577.504533][ C0] Read of size 8 at addr ffffc9001a547550 by task kworker/u4:1/21 [ 1577.512338][ C0] [ 1577.514685][ C0] CPU: 0 PID: 21 Comm: kworker/u4:1 Not tainted 5.8.0-rc3-next-20200703-syzkaller #0 [ 1577.524144][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.534321][ C0] Workqueue: bat_events batadv_nc_worker [ 1577.539981][ C0] Call Trace: [ 1577.543341][ C0] [ 1577.546228][ C0] dump_stack+0x18f/0x20d [ 1577.550598][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.555384][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.560173][ C0] print_address_description.constprop.0.cold+0x5/0x436 [ 1577.567135][ C0] ? lapic_next_event+0x4d/0x80 [ 1577.572037][ C0] ? lockdep_hardirqs_off+0x66/0xa0 [ 1577.577269][ C0] ? vprintk_func+0x97/0x1a6 [ 1577.581905][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.586699][ C0] kasan_report.cold+0x1f/0x37 [ 1577.591492][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.596276][ C0] csd_lock_record+0xcb/0xe0 [ 1577.600880][ C0] flush_smp_call_function_queue+0x285/0x730 [ 1577.606876][ C0] ? flush_tlb_one_kernel+0x60/0x60 [ 1577.612108][ C0] __sysvec_call_function_single+0x98/0x490 [ 1577.618034][ C0] asm_call_on_stack+0xf/0x20 [ 1577.622719][ C0] [ 1577.625680][ C0] sysvec_call_function_single+0xe0/0x120 [ 1577.631450][ C0] asm_sysvec_call_function_single+0x12/0x20 [ 1577.637461][ C0] RIP: 0010:lock_acquire+0x270/0xad0 [ 1577.642761][ C0] Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 f8 06 00 00 48 83 3d 6d c1 5a 08 00 0f 84 a6 05 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 10 48 c7 [ 1577.662404][ C0] RSP: 0018:ffffc90000dd7b80 EFLAGS: 00000282 [ 1577.668490][ C0] RAX: 1ffffffff1369fe0 RBX: ffff8880a97a8580 RCX: 0000000000000001 [ 1577.676484][ C0] RDX: dffffc0000000000 RSI: 73bfd8279e93f92a RDI: 0000000000000282 [ 1577.684474][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8c5a7a27 [ 1577.692460][ C0] R10: fffffbfff18b4f44 R11: 0000000000000000 R12: 0000000000000002 [ 1577.700446][ C0] R13: ffffffff89bc3040 R14: 0000000000000000 R15: ffff8880a97a8580 [ 1577.708483][ C0] ? lock_release+0x8d0/0x8d0 [ 1577.713187][ C0] ? lock_downgrade+0x820/0x820 [ 1577.718086][ C0] ? batadv_nc_worker+0xa78/0xe50 [ 1577.723131][ C0] ? batadv_nc_worker+0x786/0xe50 [ 1577.728186][ C0] batadv_nc_worker+0x12d/0xe50 [ 1577.733061][ C0] ? batadv_nc_worker+0xf3/0xe50 [ 1577.738037][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1577.743349][ C0] process_one_work+0x94c/0x1670 [ 1577.748333][ C0] ? lock_release+0x8d0/0x8d0 [ 1577.753036][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1577.758440][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1577.763406][ C0] ? lockdep_hardirqs_off+0x66/0xa0 [ 1577.768646][ C0] worker_thread+0x64c/0x1120 [ 1577.773370][ C0] ? process_one_work+0x1670/0x1670 [ 1577.778939][ C0] kthread+0x3b5/0x4a0 [ 1577.783024][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1577.788144][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1577.793319][ C0] ret_from_fork+0x1f/0x30 [ 1577.797765][ C0] [ 1577.800089][ C0] [ 1577.802413][ C0] Memory state around the buggy address: [ 1577.808050][ C0] ffffc9001a547400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1577.816120][ C0] ffffc9001a547480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1577.824194][ C0] >ffffc9001a547500: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 f3 f3 f3 f3 [ 1577.832262][ C0] ^ [ 1577.839209][ C0] ffffc9001a547580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1577.847283][ C0] ffffc9001a547600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1577.855353][ C0] ================================================================== [ 1577.863451][ C0] Disabling lock debugging due to kernel taint [ 1577.869636][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 1577.876258][ C0] CPU: 0 PID: 21 Comm: kworker/u4:1 Tainted: G B 5.8.0-rc3-next-20200703-syzkaller #0 [ 1577.887114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1577.897210][ C0] Workqueue: bat_events batadv_nc_worker [ 1577.902842][ C0] Call Trace: [ 1577.906125][ C0] [ 1577.908993][ C0] dump_stack+0x18f/0x20d [ 1577.913350][ C0] ? csd_lock_record+0x30/0xe0 [ 1577.918124][ C0] panic+0x2e3/0x75c [ 1577.922027][ C0] ? __warn_printk+0xf3/0xf3 [ 1577.926647][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0xe0 [ 1577.932473][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.937248][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.942014][ C0] end_report+0x4d/0x53 [ 1577.946178][ C0] kasan_report.cold+0xd/0x37 [ 1577.950869][ C0] ? csd_lock_record+0xcb/0xe0 [ 1577.955641][ C0] csd_lock_record+0xcb/0xe0 [ 1577.960235][ C0] flush_smp_call_function_queue+0x285/0x730 [ 1577.966226][ C0] ? flush_tlb_one_kernel+0x60/0x60 [ 1577.971433][ C0] __sysvec_call_function_single+0x98/0x490 [ 1577.977348][ C0] asm_call_on_stack+0xf/0x20 [ 1577.982018][ C0] [ 1577.984959][ C0] sysvec_call_function_single+0xe0/0x120 [ 1577.990691][ C0] asm_sysvec_call_function_single+0x12/0x20 [ 1577.996687][ C0] RIP: 0010:lock_acquire+0x270/0xad0 [ 1578.001976][ C0] Code: 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 f8 06 00 00 48 83 3d 6d c1 5a 08 00 0f 84 a6 05 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 b8 00 00 00 00 00 fc ff df 48 03 44 24 10 48 c7 [ 1578.021589][ C0] RSP: 0018:ffffc90000dd7b80 EFLAGS: 00000282 [ 1578.027659][ C0] RAX: 1ffffffff1369fe0 RBX: ffff8880a97a8580 RCX: 0000000000000001 [ 1578.035637][ C0] RDX: dffffc0000000000 RSI: 73bfd8279e93f92a RDI: 0000000000000282 [ 1578.043613][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8c5a7a27 [ 1578.051611][ C0] R10: fffffbfff18b4f44 R11: 0000000000000000 R12: 0000000000000002 [ 1578.059612][ C0] R13: ffffffff89bc3040 R14: 0000000000000000 R15: ffff8880a97a8580 [ 1578.067636][ C0] ? lock_release+0x8d0/0x8d0 [ 1578.072318][ C0] ? lock_downgrade+0x820/0x820 [ 1578.077180][ C0] ? batadv_nc_worker+0xa78/0xe50 [ 1578.082203][ C0] ? batadv_nc_worker+0x786/0xe50 [ 1578.087237][ C0] batadv_nc_worker+0x12d/0xe50 [ 1578.092090][ C0] ? batadv_nc_worker+0xf3/0xe50 [ 1578.097051][ C0] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1578.102287][ C0] process_one_work+0x94c/0x1670 [ 1578.107244][ C0] ? lock_release+0x8d0/0x8d0 [ 1578.111930][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 1578.117326][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1578.122280][ C0] ? lockdep_hardirqs_off+0x66/0xa0 [ 1578.127531][ C0] worker_thread+0x64c/0x1120 [ 1578.132256][ C0] ? process_one_work+0x1670/0x1670 [ 1578.137490][ C0] kthread+0x3b5/0x4a0 [ 1578.141570][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1578.146691][ C0] ? __kthread_bind_mask+0xc0/0xc0 [ 1578.151823][ C0] ret_from_fork+0x1f/0x30 [ 1578.157489][ C0] Kernel Offset: disabled [ 1578.161831][ C0] Rebooting in 86400 seconds..