[ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.116' (ECDSA) to the list of known hosts. 2020/10/09 01:08:18 fuzzer started 2020/10/09 01:08:18 dialing manager at 10.128.0.26:38013 2020/10/09 01:08:38 syscalls: 3450 2020/10/09 01:08:38 code coverage: enabled 2020/10/09 01:08:38 comparison tracing: enabled 2020/10/09 01:08:38 extra coverage: enabled 2020/10/09 01:08:38 setuid sandbox: enabled 2020/10/09 01:08:38 namespace sandbox: enabled 2020/10/09 01:08:38 Android sandbox: /sys/fs/selinux/policy does not exist 2020/10/09 01:08:38 fault injection: enabled 2020/10/09 01:08:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/10/09 01:08:38 net packet injection: enabled 2020/10/09 01:08:38 net device setup: enabled 2020/10/09 01:08:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/10/09 01:08:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/10/09 01:08:38 USB emulation: enabled 2020/10/09 01:08:38 hci packet injection: enabled 2020/10/09 01:08:38 wifi device emulation: enabled 01:12:04 executing program 0: 01:12:04 executing program 1: 01:12:05 executing program 2: 01:12:05 executing program 3: 01:12:05 executing program 4: 01:12:05 executing program 5: syzkaller login: [ 287.343117][ T6902] IPVS: ftp: loaded support on port[0] = 21 [ 287.562423][ T6904] IPVS: ftp: loaded support on port[0] = 21 [ 287.589959][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 287.824092][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.833505][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.843407][ T6902] device bridge_slave_0 entered promiscuous mode [ 287.893856][ T6904] chnl_net:caif_netlink_parms(): no params data found [ 287.918027][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.924139][ T6906] IPVS: ftp: loaded support on port[0] = 21 [ 287.925132][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.946887][ T6902] device bridge_slave_1 entered promiscuous mode [ 288.042837][ T6908] IPVS: ftp: loaded support on port[0] = 21 [ 288.081287][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.096171][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.224645][ T6910] IPVS: ftp: loaded support on port[0] = 21 [ 288.286925][ T6902] team0: Port device team_slave_0 added [ 288.340385][ T6902] team0: Port device team_slave_1 added [ 288.441501][ T6904] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.441657][ T6915] IPVS: ftp: loaded support on port[0] = 21 [ 288.454397][ T6904] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.466331][ T6904] device bridge_slave_0 entered promiscuous mode [ 288.500533][ T6904] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.509560][ T6904] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.517264][ T6904] device bridge_slave_1 entered promiscuous mode [ 288.532740][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.543744][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.572462][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.614021][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.621609][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.648601][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.691660][ T6904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.704289][ T6904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.726247][ T6902] device hsr_slave_0 entered promiscuous mode [ 288.734323][ T6902] device hsr_slave_1 entered promiscuous mode [ 288.916160][ T6904] team0: Port device team_slave_0 added [ 288.972281][ T6904] team0: Port device team_slave_1 added [ 288.978456][ T6906] chnl_net:caif_netlink_parms(): no params data found [ 289.065236][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 289.135153][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.144272][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.171587][ T6904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.244541][ T6904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.253684][ T6904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.281294][ T6904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.308377][ T12] Bluetooth: hci0: command 0x0409 tx timeout [ 289.337812][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 289.415766][ T6915] chnl_net:caif_netlink_parms(): no params data found [ 289.444527][ T6904] device hsr_slave_0 entered promiscuous mode [ 289.451568][ T6904] device hsr_slave_1 entered promiscuous mode [ 289.458553][ T6904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.466374][ T6904] Cannot create hsr debugfs directory [ 289.539208][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.546306][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.547674][ T12] Bluetooth: hci1: command 0x0409 tx timeout [ 289.558163][ T6906] device bridge_slave_0 entered promiscuous mode [ 289.660818][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.669266][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.678868][ T6906] device bridge_slave_1 entered promiscuous mode [ 289.751903][ T6902] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 289.785092][ T6906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.806651][ T6783] Bluetooth: hci2: command 0x0409 tx timeout [ 289.831572][ T6902] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 289.846716][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.854214][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.863736][ T6908] device bridge_slave_0 entered promiscuous mode [ 289.873331][ T6906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.899970][ T6915] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.907097][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.916739][ T6915] device bridge_slave_0 entered promiscuous mode [ 289.928483][ T6902] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 289.944709][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.948616][ T12] Bluetooth: hci3: command 0x0409 tx timeout [ 289.952765][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.966987][ T6908] device bridge_slave_1 entered promiscuous mode [ 289.982741][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.989946][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.999300][ T6910] device bridge_slave_0 entered promiscuous mode [ 290.008665][ T6915] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.015781][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.029613][ T6915] device bridge_slave_1 entered promiscuous mode [ 290.061730][ T6902] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.090589][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.097929][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.106646][ T6910] device bridge_slave_1 entered promiscuous mode [ 290.146004][ T6906] team0: Port device team_slave_0 added [ 290.181659][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.196966][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.207546][ T6783] Bluetooth: hci4: command 0x0409 tx timeout [ 290.216589][ T6915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.231720][ T6906] team0: Port device team_slave_1 added [ 290.246021][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.271664][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.283336][ T6915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.343741][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.351029][ T2668] Bluetooth: hci5: command 0x0409 tx timeout [ 290.364785][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.393409][ T6906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.427684][ T6910] team0: Port device team_slave_0 added [ 290.436305][ T6915] team0: Port device team_slave_0 added [ 290.461292][ T6906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.469998][ T6906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.500526][ T6906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.515494][ T6915] team0: Port device team_slave_1 added [ 290.534906][ T6910] team0: Port device team_slave_1 added [ 290.579767][ T6908] team0: Port device team_slave_0 added [ 290.613318][ T6904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.635551][ T6908] team0: Port device team_slave_1 added [ 290.665855][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.673889][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.701752][ T6915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.715131][ T6915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.726181][ T6915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.758254][ T6915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.779425][ T6904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.800587][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.809636][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.839990][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.857253][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.865964][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.897796][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.925816][ T6906] device hsr_slave_0 entered promiscuous mode [ 290.933312][ T6906] device hsr_slave_1 entered promiscuous mode [ 290.943145][ T6906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.952029][ T6906] Cannot create hsr debugfs directory [ 290.958684][ T6904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.969555][ T6904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.979851][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.986813][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.014235][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.028730][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.035710][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.064326][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.111501][ T6910] device hsr_slave_0 entered promiscuous mode [ 291.120488][ T6910] device hsr_slave_1 entered promiscuous mode [ 291.129805][ T6910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.138077][ T6910] Cannot create hsr debugfs directory [ 291.215990][ T6908] device hsr_slave_0 entered promiscuous mode [ 291.223945][ T6908] device hsr_slave_1 entered promiscuous mode [ 291.235206][ T6908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.243608][ T6908] Cannot create hsr debugfs directory [ 291.283162][ T6915] device hsr_slave_0 entered promiscuous mode [ 291.295222][ T6915] device hsr_slave_1 entered promiscuous mode [ 291.303109][ T6915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.316769][ T6915] Cannot create hsr debugfs directory [ 291.387512][ T12] Bluetooth: hci0: command 0x041b tx timeout [ 291.595669][ T6902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.631617][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 291.673510][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.683617][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.698671][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.783430][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.794082][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.816488][ T2668] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.823862][ T2668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.833131][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.842789][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.851717][ T2668] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.858884][ T2668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.866454][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 291.897427][ T6906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.908989][ T5] Bluetooth: hci2: command 0x041b tx timeout [ 291.923843][ T6906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.935738][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.944184][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 291.969069][ T6906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.981290][ T6906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.001300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.010123][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.028462][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.037249][ T2668] Bluetooth: hci3: command 0x041b tx timeout [ 292.040666][ T6904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.060207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.070191][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.104884][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.114421][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.123585][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.133869][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.173753][ T6904] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.187273][ T6902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.198644][ T6910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.215612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.224129][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.253926][ T6910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.268130][ T2668] Bluetooth: hci4: command 0x041b tx timeout [ 292.281686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.291104][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.300469][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.307635][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.316464][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.373098][ T6910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.394496][ T6908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.418624][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.427850][ T6783] Bluetooth: hci5: command 0x041b tx timeout [ 292.429481][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.448996][ T2668] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.456095][ T2668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.468962][ T6910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.494626][ T6908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.506621][ T6908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.526159][ T6908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.559971][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.596784][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.610757][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.622237][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.633107][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.644302][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.655151][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 292.665247][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 292.682155][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.712227][ T6915] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.722462][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.736387][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.753144][ T6902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.774320][ T6915] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.791156][ T6915] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.811292][ T6915] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.850142][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.859893][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.871370][ T6904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.940009][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 292.949032][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.026058][ T6906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.037103][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.046788][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.055845][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.064278][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.076113][ T6902] device veth0_vlan entered promiscuous mode [ 293.104353][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.112317][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.130436][ T6904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.155062][ T6902] device veth1_vlan entered promiscuous mode [ 293.171563][ T6906] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.182999][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 293.192613][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.200950][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.245830][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 293.255047][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.265183][ T2668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.274637][ T2668] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.281801][ T2668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.325955][ T6910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.343552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.352927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.363215][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.372152][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.379318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.387671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.447052][ T6902] device veth0_macvtap entered promiscuous mode [ 293.468341][ T6783] Bluetooth: hci0: command 0x040f tx timeout [ 293.480369][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 293.508532][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 293.527478][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.535401][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.543911][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.553635][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 293.583504][ T6910] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.606378][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.630313][ T6902] device veth1_macvtap entered promiscuous mode [ 293.650468][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 293.658807][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.671298][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.680221][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.689398][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.709550][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 293.745049][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.758895][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.766682][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.776235][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.785451][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.797084][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.805922][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.815462][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.823818][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.832827][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.841664][ T6783] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.848787][ T6783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.856573][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 293.865386][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 293.881297][ T6906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.893745][ T6906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.908803][ T6915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.939224][ T6902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.947986][ T8208] Bluetooth: hci2: command 0x040f tx timeout [ 293.954498][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.965586][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.983649][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.992840][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.001491][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.012478][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.021588][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.030348][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.037494][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.045745][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.055795][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.065761][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.080440][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.104162][ T6902] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.114664][ T6902] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.117589][ T6783] Bluetooth: hci3: command 0x040f tx timeout [ 294.138051][ T6902] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.146798][ T6902] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.160350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.171350][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.181053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.193197][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.201623][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.232411][ T6904] device veth0_vlan entered promiscuous mode [ 294.264040][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.275157][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.289142][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.296230][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.304501][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.314457][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.323523][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.332736][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.341958][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 294.347737][ T8170] Bluetooth: hci4: command 0x040f tx timeout [ 294.349929][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 294.385815][ T6904] device veth1_vlan entered promiscuous mode [ 294.400744][ T6915] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.413985][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.423079][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.432477][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.441400][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.450874][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.458030][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.465911][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.474894][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.484689][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.493996][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.503199][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.512246][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.520729][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.529624][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.538220][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.545278][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.556392][ T6910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.565468][ T8208] Bluetooth: hci5: command 0x040f tx timeout [ 294.589590][ T6906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.606019][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.642586][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.653335][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.663426][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.673492][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.682594][ T2480] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.689754][ T2480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.697534][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.707424][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.779027][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.792982][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.804990][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.815471][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.825358][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.835236][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.845773][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.854859][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.864158][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.920175][ T6908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.945790][ T6908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.959244][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.991323][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.000254][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.010209][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.019641][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.029616][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.040064][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.085090][ T6915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.099456][ T6915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.126057][ T6910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.165672][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.174785][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.189572][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.199735][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.209269][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.218305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.243151][ T6904] device veth0_macvtap entered promiscuous mode [ 295.291332][ T6904] device veth1_macvtap entered promiscuous mode [ 295.309238][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.331020][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.344934][ T6906] device veth0_vlan entered promiscuous mode [ 295.360105][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.369956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.379474][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 295.387280][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.396977][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.405508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.413632][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.435729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.445631][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.454558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.476729][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.508823][ T6908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.523703][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.542771][ T6904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 295.555261][ T17] Bluetooth: hci0: command 0x0419 tx timeout [ 295.562021][ T6904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.580055][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.617560][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.626323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.642624][ T6904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 295.664359][ T6904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.677141][ T6904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.700027][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.700509][ T6906] device veth1_vlan entered promiscuous mode [ 295.722617][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.728590][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.732104][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.754409][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.769900][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.782264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.791907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 295.800719][ T6783] Bluetooth: hci1: command 0x0419 tx timeout [ 295.810307][ T6904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.822244][ T6904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.831334][ T6904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.840687][ T6904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.888197][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.896427][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.927258][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 01:12:14 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000140)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) [ 296.004747][ T6910] device veth0_vlan entered promiscuous mode [ 296.027785][ T6783] Bluetooth: hci2: command 0x0419 tx timeout [ 296.029268][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.057034][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.066940][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.077872][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 01:12:14 executing program 0: [ 296.128854][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.137898][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.147188][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.155381][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.177971][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.186692][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 296.196540][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.197804][ T17] Bluetooth: hci3: command 0x0419 tx timeout [ 296.206816][ T8170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 01:12:14 executing program 0: [ 296.229351][ T6908] device veth0_vlan entered promiscuous mode [ 296.266524][ T6908] device veth1_vlan entered promiscuous mode [ 296.319808][ T6906] device veth0_macvtap entered promiscuous mode [ 296.360779][ T6910] device veth1_vlan entered promiscuous mode 01:12:15 executing program 0: [ 296.428599][ T6783] Bluetooth: hci4: command 0x0419 tx timeout [ 296.486362][ T6906] device veth1_macvtap entered promiscuous mode 01:12:15 executing program 0: [ 296.526608][ T6915] device veth0_vlan entered promiscuous mode [ 296.557258][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.568484][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.576683][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.596979][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.614866][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 01:12:15 executing program 0: [ 296.635362][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.646193][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 296.663620][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 01:12:15 executing program 0: [ 296.694779][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.734486][ T6783] Bluetooth: hci5: command 0x0419 tx timeout [ 296.748686][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.758933][ T6783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 296.774317][ T6915] device veth1_vlan entered promiscuous mode [ 296.819190][ T6908] device veth0_macvtap entered promiscuous mode [ 296.841807][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.861639][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.895832][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 296.921028][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.951901][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.983592][ T6908] device veth1_macvtap entered promiscuous mode [ 297.006439][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.028228][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.038128][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.046328][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.059832][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.069586][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.078582][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.087271][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.099206][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.114693][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.124974][ T6906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.135556][ T6906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.146920][ T6906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.173566][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.182694][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.194926][ T6910] device veth0_macvtap entered promiscuous mode [ 297.209387][ T6910] device veth1_macvtap entered promiscuous mode [ 297.219045][ T6906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.231616][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.240903][ T6906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.247443][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.250369][ T6906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.266320][ T6906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.320338][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.352706][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.363741][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.378511][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.390193][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.400972][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.412573][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.425547][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.459362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.481289][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.501594][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.511419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 01:12:16 executing program 1: getresuid(&(0x7f00000001c0), &(0x7f00000024c0), &(0x7f00000002c0)) [ 297.521852][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.536258][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.549004][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.560407][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.571214][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.588004][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.617406][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 297.639126][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.667692][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.681379][ T6915] device veth0_macvtap entered promiscuous mode [ 297.727754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 297.739572][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.758234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.777109][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.792926][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.804972][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.816127][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.826618][ T6908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.838334][ T6908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.851307][ T6908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.863289][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.875943][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.886162][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.901701][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.911962][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.922443][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.932632][ T6910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 297.943645][ T6910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.955717][ T6910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.994151][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.011146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.020717][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.030530][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.042136][ T6915] device veth1_macvtap entered promiscuous mode [ 298.054338][ T6908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.064046][ T6908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.074148][ T6908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.082988][ T6908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.106066][ T6910] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.117680][ T6910] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.126446][ T6910] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.136390][ T6910] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.180316][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.190674][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.203808][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.214930][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.229623][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.241661][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.252743][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.266669][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.280312][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.290928][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.302013][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.312332][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 298.323527][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.335280][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.385667][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.401491][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.411599][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.444822][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.470522][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.481720][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.492369][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.502430][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.513507][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.523408][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.533942][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.543861][ T6915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 298.554576][ T6915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.569707][ T6915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.593560][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.607893][ T2480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.636254][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.639588][ T6915] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.664310][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.672974][ T6915] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.685702][ T6915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.694937][ T6915] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.733224][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:12:17 executing program 2: mknod$loop(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000280)={0x8}, 0x0, 0x0) [ 298.862703][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.917147][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.980320][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.011826][ T245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.030961][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.056746][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.075875][ T245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.105876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.129380][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.141147][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.166920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.184510][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.193340][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:12:17 executing program 3: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x291400, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002680)={&(0x7f0000002640)='./file1\x00'}, 0x10) [ 299.240988][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 299.258800][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 299.290013][ T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.313176][ T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.345472][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:12:18 executing program 4: mknod$loop(&(0x7f0000000000)='./file1\x00', 0x0, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)={0xc, 0x0, "7de17737"}, &(0x7f0000000140), 0x1400) 01:12:18 executing program 5: r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000180)=@ethtool_dump={0x3f}}) 01:12:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 01:12:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 01:12:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, 0x0, 0x0) 01:12:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000006c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000700)="a6", 0x1}], 0x1}}], 0x1, 0x8814) 01:12:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000100)) 01:12:18 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$char_usb(r0, &(0x7f0000000c80)="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", 0x1000) 01:12:18 executing program 0: r0 = timerfd_create(0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) 01:12:18 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000180)={0xfffffffe}, 0x10) 01:12:18 executing program 5: 01:12:18 executing program 1: 01:12:18 executing program 3: 01:12:18 executing program 2: 01:12:18 executing program 4: 01:12:18 executing program 5: 01:12:18 executing program 0: 01:12:18 executing program 1: 01:12:18 executing program 3: 01:12:18 executing program 0: 01:12:18 executing program 2: 01:12:18 executing program 4: 01:12:18 executing program 5: 01:12:18 executing program 3: 01:12:18 executing program 1: 01:12:18 executing program 2: 01:12:18 executing program 4: 01:12:18 executing program 0: 01:12:18 executing program 5: 01:12:18 executing program 1: 01:12:18 executing program 3: 01:12:19 executing program 2: 01:12:19 executing program 0: 01:12:19 executing program 4: 01:12:19 executing program 5: 01:12:19 executing program 1: 01:12:19 executing program 3: 01:12:19 executing program 4: 01:12:19 executing program 2: 01:12:19 executing program 0: 01:12:19 executing program 5: 01:12:19 executing program 3: 01:12:19 executing program 4: 01:12:19 executing program 2: 01:12:19 executing program 1: 01:12:19 executing program 0: 01:12:19 executing program 4: 01:12:19 executing program 2: 01:12:19 executing program 5: 01:12:19 executing program 3: 01:12:19 executing program 1: 01:12:19 executing program 4: 01:12:19 executing program 5: 01:12:19 executing program 0: 01:12:19 executing program 3: 01:12:19 executing program 2: 01:12:19 executing program 1: 01:12:19 executing program 5: open$dir(&(0x7f00000000c0)='./file0\x00', 0xe040, 0x0) 01:12:19 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8241, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 01:12:19 executing program 4: 01:12:19 executing program 0: 01:12:19 executing program 2: 01:12:19 executing program 1: [ 301.280819][ T29] audit: type=1800 audit(1602205939.882:2): pid=8446 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15769 res=0 errno=0 01:12:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x0, r1}) 01:12:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc101, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 01:12:20 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r0) [ 301.372930][ T29] audit: type=1800 audit(1602205939.882:3): pid=8446 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=15769 res=0 errno=0 01:12:20 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 01:12:20 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x800, &(0x7f00000001c0)) 01:12:20 executing program 1: timer_create(0x1, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000001c0)) 01:12:20 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/urandom\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 01:12:20 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80e42, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 01:12:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) 01:12:20 executing program 2: r0 = socket(0x1, 0x5, 0x0) sendmsg$sock(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 01:12:20 executing program 3: semget$private(0x0, 0x1, 0x180) 01:12:20 executing program 1: get_mempolicy(0x0, &(0x7f0000000040), 0x101, &(0x7f0000ffd000/0x2000)=nil, 0x4) 01:12:20 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x4d6040, 0x0) 01:12:20 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc101, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:12:20 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2c101, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 01:12:20 executing program 2: open$dir(&(0x7f0000000040)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4000, 0x400, &(0x7f00000001c0)) 01:12:20 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x533041, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80111, r0, 0x0) 01:12:20 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 01:12:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg$inet(r0, 0x0, 0x0, 0xc040) 01:12:20 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8946, 0x0) 01:12:20 executing program 2: semget$private(0x0, 0x1, 0x428) 01:12:20 executing program 0: open$dir(&(0x7f0000000300)='./file0\x00', 0x47a243, 0x234) 01:12:20 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_GETSIZE64(r0, 0x80081272, 0x0) 01:12:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0xc101, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$9p(r1, 0x0, 0x0) 01:12:20 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, 0x0, 0x0, 0x80) 01:12:20 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x80, &(0x7f0000000080)) 01:12:20 executing program 2: semget$private(0x0, 0x2, 0x209) 01:12:20 executing program 0: open$dir(&(0x7f0000000000)='./file0\x00', 0x345843, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000540)='./file0\x00', 0x1000000) 01:12:20 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, 0x0) 01:12:20 executing program 4: open$dir(&(0x7f0000000080)='./file0\x00', 0x216cc2, 0xf2) 01:12:20 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') 01:12:21 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) 01:12:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, 0x0) 01:12:21 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:12:21 executing program 4: open$dir(&(0x7f0000000300)='./file0\x00', 0x3118c2, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x110) 01:12:21 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) r0 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, r1, 0x1000) 01:12:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x482001, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 01:12:21 executing program 3: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x2, 0xb, 0x0) 01:12:21 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = inotify_init1(0x0) dup3(r1, r0, 0x0) 01:12:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x0) 01:12:21 executing program 4: semget(0x1, 0x4, 0x540) 01:12:21 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8241, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:12:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo\x00') openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 01:12:21 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000004ac0), 0x0, 0x80) 01:12:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x80000) 01:12:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 01:12:21 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40) 01:12:21 executing program 1: mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 01:12:21 executing program 3: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x7000) 01:12:21 executing program 5: add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 01:12:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) 01:12:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 01:12:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_RESETZONE(r0, 0x40101283, 0x0) 01:12:21 executing program 1: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:12:21 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2c101, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:12:21 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x80440, 0xed) 01:12:21 executing program 3: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0xf826]) 01:12:21 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, 0x0) 01:12:21 executing program 0: r0 = semget$private(0x0, 0x2, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000300)) 01:12:22 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) getgroups(0x1, &(0x7f00000011c0)=[0xffffffffffffffff]) chown(&(0x7f0000001180)='./file0\x00', 0x0, r0) 01:12:22 executing program 5: open$dir(&(0x7f0000000040)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x40, &(0x7f00000001c0)) 01:12:22 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x0, 0x0) fstatfs(r0, &(0x7f00000003c0)=""/59) 01:12:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 01:12:22 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x2047ae5f3f729505, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) 01:12:22 executing program 0: semget$private(0x0, 0x3, 0x6e3) 01:12:22 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 01:12:22 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self\x00', 0x8040, 0x0) 01:12:22 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x345843, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xc600, 0x60) 01:12:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) utimensat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:12:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x94dc01, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 01:12:22 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000004ac0), 0x0, 0x0) 01:12:22 executing program 1: openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/urandom\x00', 0x2100, 0x0) 01:12:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_ZEROOUT(r0, 0x127f, 0x0) 01:12:22 executing program 5: r0 = semget$private(0x0, 0x4, 0x0) setreuid(0x0, 0xee01) semop(r0, &(0x7f0000000080)=[{}], 0x1) 01:12:22 executing program 3: mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 01:12:22 executing program 4: renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') 01:12:22 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x2047ae5f3f729505, 0x0) write$cgroup_devices(r0, 0x0, 0xffffffffffffff26) 01:12:22 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) 01:12:22 executing program 2: r0 = eventfd(0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) 01:12:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8241, 0x0) write$P9_RRENAME(r0, 0x0, 0x0) 01:12:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000240)) 01:12:22 executing program 0: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000000)=""/228) 01:12:22 executing program 1: timer_create(0x6, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) 01:12:22 executing program 4: r0 = socket(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x8841, 0x0, 0x0) 01:12:22 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400081, 0x0) write$char_usb(r0, 0x0, 0x0) 01:12:22 executing program 5: open$dir(&(0x7f0000000000)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x40, &(0x7f00000001c0)) 01:12:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 01:12:23 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0x5450, 0x0) 01:12:23 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x80040, 0x0) lsetxattr(&(0x7f0000001140)='./file0\x00', 0x0, 0x0, 0x0, 0x5) 01:12:23 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000100)) 01:12:23 executing program 2: semget$private(0x0, 0x1, 0x109) 01:12:23 executing program 3: open$dir(&(0x7f0000000040)='./file0\x00', 0x345843, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0, &(0x7f00000001c0)) 01:12:23 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) 01:12:23 executing program 4: open$dir(&(0x7f0000000380)='./file0\x00', 0x40, 0x40) 01:12:23 executing program 0: semget$private(0x0, 0x4, 0x1) 01:12:23 executing program 1: semget(0x1, 0x4, 0x301) 01:12:23 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x214240, 0x0) 01:12:23 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) 01:12:23 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CHAR_RAW_SECTGET(r0, 0x1267, 0x0) 01:12:23 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) 01:12:23 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r0, 0x0, 0x0) 01:12:23 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 01:12:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000003180)) 01:12:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000180)="89", 0x1, 0x20040800, 0x0, 0x0) 01:12:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 01:12:23 executing program 3: open$dir(&(0x7f0000000300)='./file0\x00', 0x3118c2, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x2000020) 01:12:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000180), 0x0, 0x20040800, 0x0, 0x0) 01:12:23 executing program 4: openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x90200, 0x0) 01:12:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480200001900010028bd700000000000fe880000000000000000000000000001fe800000000000000000000000000023000000004e2400000a00000000000000", @ANYRES32=0x0, @ANYBLOB="ff"], 0x248}}, 0x0) 01:12:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480200001900010028bd700000000000fe880000000000000000000000000001fe800000000000000000000000000023000000004e2400000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff"], 0x248}}, 0x0) 01:12:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="f518377a1d70479d6a10101fab97cb3b3a2cdfe6f8b88cc29f4755440000000000000000000000006ee8fefd0c5600802400000000009f6a558f6453e3e7ddd364500fc8f5794c4a10e908d7283d19546e5659070803010b509a2f39f3e9376a9cf56835f4ef5bc8c0c84b4966716367e5c28d03cb851be973e341e736047d9e491eb3f4474bdac7fa46e4672e4f8b568b4bdd5ac2fe8832b73e27545de34e090062adc3c8e32aead20935bcc81936b2c451cb70a47c10f35eef4c446b9753c06ad6eebe03b27d25be", 0xc9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="55a63ca73d52b3f955f5250cf8e6f342d3ed59380ccace432b540b986ed7e7ce21271459842f0afec93a59a4ab6660874735b2432bb7fe14014ee6d1ab994cb87b6ecfb4d3d4c424cfbfd9a1d1fbdc98aabb8d4e23cbba6a5b1bbf2cc2f28ea2bb64ee1301dec8a3", 0x68}], 0x1}}], 0x2, 0x0) 01:12:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480200001900010028bd700000000000fe880000000000000000000000000001fe800000000000000000000000000023000000004e2400000a"], 0x248}}, 0x0) 01:12:24 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs\x00') read$FUSE(r0, 0x0, 0x0) [ 305.362314][ T8697] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.449330][ T8702] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.450997][ T8703] netlink: 400 bytes leftover after parsing attributes in process `syz-executor.5'. [ 305.493178][ T8705] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 305.533402][ T8705] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (36365!=0) 01:12:24 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) [ 305.625113][ T8705] EXT4-fs (loop4): corrupt root inode, run e2fsck 01:12:24 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5451, 0x0) [ 305.670310][ T8705] EXT4-fs (loop4): mount failed 01:12:24 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4a342, 0x0) write$binfmt_elf32(r0, 0x0, 0x0) 01:12:24 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0) write$binfmt_script(r0, 0x0, 0x0) 01:12:24 executing program 5: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 01:12:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x5, 0xbd2, 0x34e, 0xfffffffb, 0x0, "40982e07edea9e639ae175ca5fa75576a4cf88", 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) 01:12:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:24 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syncfs(r1) [ 306.020374][ T8727] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 306.069331][ T8728] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.093710][ T8728] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (36365!=0) 01:12:24 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x323882, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 01:12:24 executing program 5: semop(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getuid() listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$TIOCGSID(r1, 0x5451, 0x0) 01:12:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) write$P9_RRENAME(r1, 0x0, 0x0) [ 306.125793][ T8728] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 306.135221][ T8728] EXT4-fs (loop4): mount failed 01:12:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/net\x00') 01:12:24 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) 01:12:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) 01:12:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f00000013c0), &(0x7f0000001400)=0x4) 01:12:25 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)) 01:12:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000200)) 01:12:25 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x323882, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 01:12:25 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) fsync(r0) 01:12:25 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x60a203, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) [ 306.591164][ T8763] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.627475][ T8763] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (36365!=0) 01:12:25 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 01:12:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) fchmod(r0, 0x0) [ 306.649625][ T8763] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 306.689294][ T8763] EXT4-fs (loop4): mount failed 01:12:25 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) fchmod(r0, 0x0) 01:12:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) dup2(r0, r1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) 01:12:25 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) 01:12:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:25 executing program 3: 01:12:25 executing program 2: 01:12:25 executing program 0: 01:12:25 executing program 5: 01:12:25 executing program 1: 01:12:25 executing program 3: [ 307.000093][ T8792] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.023532][ T8792] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (36365!=0) 01:12:25 executing program 5: 01:12:25 executing program 2: [ 307.112472][ T8792] EXT4-fs (loop4): corrupt root inode, run e2fsck 01:12:25 executing program 0: [ 307.163514][ T8792] EXT4-fs (loop4): mount failed 01:12:25 executing program 0: 01:12:25 executing program 1: 01:12:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:25 executing program 3: 01:12:25 executing program 5: 01:12:25 executing program 2: 01:12:26 executing program 3: 01:12:26 executing program 1: 01:12:26 executing program 0: 01:12:26 executing program 1: 01:12:26 executing program 2: 01:12:26 executing program 5: 01:12:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:26 executing program 3: 01:12:26 executing program 0: 01:12:26 executing program 1: 01:12:26 executing program 3: 01:12:26 executing program 2: 01:12:26 executing program 1: 01:12:26 executing program 0: 01:12:26 executing program 5: 01:12:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:26 executing program 2: 01:12:26 executing program 1: 01:12:26 executing program 3: 01:12:26 executing program 0: 01:12:26 executing program 5: 01:12:26 executing program 5: 01:12:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:26 executing program 2: 01:12:26 executing program 0: 01:12:26 executing program 1: 01:12:26 executing program 3: 01:12:26 executing program 5: 01:12:26 executing program 0: 01:12:26 executing program 2: 01:12:26 executing program 5: 01:12:27 executing program 1: 01:12:27 executing program 3: 01:12:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:27 executing program 0: 01:12:27 executing program 1: 01:12:27 executing program 5: 01:12:27 executing program 2: 01:12:27 executing program 3: 01:12:27 executing program 0: 01:12:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80004, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:27 executing program 3: 01:12:27 executing program 5: 01:12:27 executing program 2: 01:12:27 executing program 1: 01:12:27 executing program 0: 01:12:27 executing program 5: 01:12:27 executing program 3: 01:12:27 executing program 1: 01:12:27 executing program 2: 01:12:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:27 executing program 5: 01:12:27 executing program 0: 01:12:27 executing program 3: 01:12:27 executing program 1: [ 309.140734][ T8887] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (10 blocks) 01:12:27 executing program 2: 01:12:27 executing program 0: 01:12:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:27 executing program 5: 01:12:27 executing program 3: 01:12:27 executing program 0: 01:12:27 executing program 1: 01:12:28 executing program 2: 01:12:28 executing program 3: [ 309.387036][ T8900] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (10 blocks) 01:12:28 executing program 5: 01:12:28 executing program 1: 01:12:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f00000000000004", 0x1b, 0x1500}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:28 executing program 0: 01:12:28 executing program 2: 01:12:28 executing program 5: 01:12:28 executing program 3: 01:12:28 executing program 1: [ 309.711335][ T8912] EXT4-fs (loop4): bad geometry: block count 512 exceeds size of device (10 blocks) 01:12:28 executing program 0: 01:12:28 executing program 5: 01:12:28 executing program 2: 01:12:28 executing program 3: 01:12:28 executing program 1: 01:12:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x0, 0x0, 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:28 executing program 0: 01:12:28 executing program 5: 01:12:28 executing program 2: 01:12:28 executing program 3: 01:12:28 executing program 1: 01:12:28 executing program 0: 01:12:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x0, 0x0, 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:28 executing program 5: 01:12:28 executing program 2: 01:12:28 executing program 3: 01:12:29 executing program 1: 01:12:29 executing program 0: 01:12:29 executing program 5: 01:12:29 executing program 2: 01:12:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x0, 0x0, 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:29 executing program 3: 01:12:29 executing program 1: 01:12:29 executing program 0: 01:12:29 executing program 5: 01:12:29 executing program 2: 01:12:29 executing program 1: 01:12:29 executing program 0: 01:12:29 executing program 3: 01:12:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000000200000005", 0x9, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:29 executing program 5: 01:12:29 executing program 2: 01:12:29 executing program 3: 01:12:29 executing program 0: 01:12:29 executing program 1: [ 310.986292][ T8956] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:12:29 executing program 1: 01:12:29 executing program 3: [ 311.046766][ T8956] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (36365!=0) [ 311.073462][ T8956] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 311.091496][ T8956] EXT4-fs (loop4): get root inode failed 01:12:29 executing program 5: 01:12:29 executing program 2: [ 311.097609][ T8956] EXT4-fs (loop4): mount failed 01:12:29 executing program 0: 01:12:29 executing program 1: 01:12:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:29 executing program 2: 01:12:29 executing program 1: 01:12:29 executing program 3: 01:12:29 executing program 0: 01:12:29 executing program 5: 01:12:30 executing program 2: 01:12:30 executing program 1: 01:12:30 executing program 3: 01:12:30 executing program 5: [ 311.517981][ T8978] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:30 executing program 0: [ 311.582902][ T8978] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:30 executing program 2: [ 311.666479][ T8978] EXT4-fs (loop4): get root inode failed [ 311.734932][ T8978] EXT4-fs (loop4): mount failed 01:12:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:30 executing program 1: 01:12:30 executing program 5: 01:12:30 executing program 2: 01:12:30 executing program 3: 01:12:30 executing program 0: 01:12:30 executing program 2: 01:12:30 executing program 1: 01:12:30 executing program 5: 01:12:30 executing program 3: 01:12:30 executing program 0: 01:12:30 executing program 2: [ 312.091199][ T8998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 312.120246][ T8998] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 312.188792][ T8998] EXT4-fs (loop4): get root inode failed [ 312.202335][ T8998] EXT4-fs (loop4): mount failed 01:12:30 executing program 2: 01:12:30 executing program 5: 01:12:30 executing program 1: 01:12:30 executing program 0: 01:12:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:30 executing program 3: 01:12:30 executing program 1: 01:12:31 executing program 2: 01:12:31 executing program 0: 01:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0) 01:12:31 executing program 3: [ 312.429283][ T9015] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:31 executing program 1: [ 312.519153][ T9015] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 312.541662][ T9015] EXT4-fs (loop4): get root inode failed [ 312.548232][ T9015] EXT4-fs (loop4): mount failed 01:12:31 executing program 2: 01:12:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:31 executing program 3: 01:12:31 executing program 0: 01:12:31 executing program 1: 01:12:31 executing program 5: 01:12:31 executing program 2: 01:12:31 executing program 3: 01:12:31 executing program 0: [ 312.833395][ T9039] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:31 executing program 5: 01:12:31 executing program 2: 01:12:31 executing program 1: [ 312.898664][ T9039] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 312.912181][ T9039] EXT4-fs (loop4): get root inode failed [ 312.918128][ T9039] EXT4-fs (loop4): mount failed 01:12:31 executing program 3: 01:12:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:31 executing program 0: 01:12:31 executing program 2: 01:12:31 executing program 5: 01:12:31 executing program 1: 01:12:31 executing program 0: 01:12:31 executing program 3: 01:12:31 executing program 0: 01:12:31 executing program 1: [ 313.237553][ T9056] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:31 executing program 5: 01:12:31 executing program 2: 01:12:31 executing program 1: [ 313.332101][ T9056] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 313.361688][ T9056] EXT4-fs (loop4): get root inode failed [ 313.373820][ T9056] EXT4-fs (loop4): mount failed 01:12:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:32 executing program 1: 01:12:32 executing program 3: 01:12:32 executing program 2: 01:12:32 executing program 5: 01:12:32 executing program 0: 01:12:32 executing program 1: 01:12:32 executing program 3: [ 313.631629][ T9075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 313.665314][ T9075] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:32 executing program 5: 01:12:32 executing program 0: 01:12:32 executing program 2: 01:12:32 executing program 1: [ 313.767304][ T9075] EXT4-fs (loop4): get root inode failed [ 313.783279][ T9075] EXT4-fs (loop4): mount failed 01:12:32 executing program 5: 01:12:32 executing program 3: 01:12:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:32 executing program 0: 01:12:32 executing program 2: 01:12:32 executing program 1: 01:12:32 executing program 3: 01:12:32 executing program 0: 01:12:32 executing program 1: [ 314.036596][ T9093] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:32 executing program 3: 01:12:32 executing program 5: 01:12:32 executing program 5: 01:12:32 executing program 0: [ 314.147564][ T9093] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:32 executing program 2: [ 314.205146][ T9093] EXT4-fs (loop4): get root inode failed [ 314.211347][ T9093] EXT4-fs (loop4): mount failed 01:12:32 executing program 3: 01:12:32 executing program 1: 01:12:32 executing program 5: 01:12:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)={0x14, 0x0, 0x1, 0x3}, 0x14}}, 0x0) 01:12:33 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}]}, 0x50}}, 0x0) 01:12:33 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 314.509415][ T9114] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 314.541671][ T9114] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:33 executing program 3: getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) [ 314.606500][ T9123] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 314.621848][ T9114] EXT4-fs (loop4): get root inode failed [ 314.628203][ T9114] EXT4-fs (loop4): mount failed [ 314.690927][ T9123] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 01:12:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400), 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0) 01:12:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}]}}, &(0x7f00000022c0)=""/130, 0x32, 0x82, 0x1}, 0x20) 01:12:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@local}]}, 0x40}}, 0x0) 01:12:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x7, 0x5}, 0x14}}, 0x0) 01:12:33 executing program 0: r0 = socket(0x2, 0x3, 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000780)) [ 314.968902][ T9139] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:33 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:33 executing program 1: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000240)) [ 315.065842][ T9139] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:33 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000002a40)={0xffffffffffffffff}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x40041) [ 315.152123][ T9139] EXT4-fs (loop4): get root inode failed [ 315.215136][ T9139] EXT4-fs (loop4): mount failed 01:12:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:33 executing program 1: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000240)) 01:12:33 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4090}, 0x4004000) 01:12:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x4, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x61}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 315.489704][ T9178] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 315.505645][ T9179] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 315.537710][ T9179] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 315.554082][ T9185] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 315.602721][ T9179] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 315.620115][ T9179] EXT4-fs (loop4): get root inode failed [ 315.625843][ T9179] EXT4-fs (loop4): mount failed 01:12:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xf}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) 01:12:34 executing program 3: bpf$BPF_BTF_LOAD(0x2, &(0x7f0000002380)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 01:12:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03", 0x1, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:34 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) [ 315.930660][ T9231] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) 01:12:34 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x8981, &(0x7f0000001500)) 01:12:34 executing program 3: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 01:12:34 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f00000022c0)=""/130, 0x1a, 0x82, 0x1}, 0x20) 01:12:34 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) bind$pptp(r0, 0x0, 0x0) 01:12:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0x2}]}, {0x0, [0x0]}}, &(0x7f0000001400)=""/192, 0x2b, 0xc0, 0x1}, 0x20) [ 315.997219][ T9231] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 316.019594][ T9231] EXT4-fs (loop4): get root inode failed [ 316.028706][ T9231] EXT4-fs (loop4): mount failed 01:12:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03", 0x1, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:34 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8915, 0x0) 01:12:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) recvmsg$can_bcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 01:12:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={0x0}}, 0x0) 01:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={0x0}}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc) 01:12:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000091c0)={&(0x7f0000008d80)={0x10, 0x0, 0x0, 0xb6f5e21ddfa59b82}, 0xc, &(0x7f0000009180)={0x0}}, 0x0) 01:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@cred={{0x1c, 0x2, 0x2, {0x0, 0x0, 0xee00}}}], 0x20}, 0x0) [ 316.302694][ T9250] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) 01:12:35 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) [ 316.407150][ T9250] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 316.425259][ T9250] EXT4-fs (loop4): get root inode failed [ 316.431418][ T9250] EXT4-fs (loop4): mount failed 01:12:35 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003180)={0x24, 0x3, 0x8, 0xc03, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 01:12:35 executing program 5: socket(0x23, 0x0, 0xfffffffd) 01:12:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03", 0x1, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect(r0, &(0x7f0000000b80)=@generic={0x0, "487e9ea6fba0409c9d0ec7cb949125332e40fb3a7372418f6de4745c69e01fc0a576156582cf75e7b0df2c27b11ee56e022d38826cf0baf4ff2c400111ffd2568b9178ca34cae3749089557cafc40c2a1af68b72e899d405be4be2c907c07b9da36cb2216d23bbd6fc86d9010ebe86181edc1206aa2a4d5031ffc49df0ab"}, 0x80) 01:12:35 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x9}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5b2}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x54}}, 0x0) 01:12:35 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80)=0xffffffffffffffff, 0x4) 01:12:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x10, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 01:12:35 executing program 1: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000002380)={0x0, &(0x7f00000022c0)=""/130, 0x0, 0x82}, 0x20) [ 316.719936][ T9283] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 316.744653][ T9284] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) 01:12:35 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x8906, 0x0) 01:12:35 executing program 5: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5411, &(0x7f00000000c0)={'wlan0\x00'}) [ 316.786170][ T9283] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 01:12:35 executing program 0: socketpair(0x0, 0x40000, 0x0, 0x0) [ 316.847654][ T9284] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 316.867888][ T9284] EXT4-fs (loop4): get root inode failed [ 316.873569][ T9284] EXT4-fs (loop4): mount failed 01:12:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6100, &(0x7f0000000000)=@framed={{}, [@generic]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:35 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) 01:12:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000", 0x3, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:35 executing program 5: pipe(&(0x7f0000000480)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 01:12:35 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f00000022c0)=""/130, 0x26, 0x82, 0x1}, 0x20) 01:12:35 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x8983, &(0x7f0000001500)) 01:12:35 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x8086c2, 0x0) [ 317.109414][ T9308] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) 01:12:35 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x8980, &(0x7f0000001500)) [ 317.172101][ T9308] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 317.208132][ T9308] EXT4-fs (loop4): get root inode failed 01:12:35 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = getpid() sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20}, 0x0) 01:12:35 executing program 3: 01:12:35 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x141e8, r0}, 0x78) 01:12:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000fc0)=@framed, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001140), 0x10}, 0x78) 01:12:35 executing program 0: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 317.265498][ T9308] EXT4-fs (loop4): mount failed 01:12:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01"], 0x12c}}, 0x0) 01:12:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000", 0x3, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:36 executing program 3: socketpair(0xa, 0x3, 0x2, &(0x7f0000002a40)) 01:12:36 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x0, 0x0, '@'}, 0x14}}, 0x0) 01:12:36 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x73}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:36 executing program 0: r0 = socket(0x2a, 0x2, 0x0) getpeername$netlink(r0, 0x0, 0x0) [ 317.529308][ T9335] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.557782][ T9336] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) [ 317.590783][ T29] audit: type=1107 audit(1602205956.192:4): pid=9340 uid=0 auid=0 ses=4 subj==unconfined msg='@' [ 317.603602][ T9344] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.1'. 01:12:36 executing program 0: socketpair(0x2b, 0x1, 0x1, &(0x7f0000000240)) 01:12:36 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x10}, 0x10}}, 0x0) [ 317.641893][ T9336] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 317.654766][ T9336] EXT4-fs (loop4): get root inode failed [ 317.660801][ T9336] EXT4-fs (loop4): mount failed 01:12:36 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0x3, &(0x7f0000000040)={0x6}, 0x8) 01:12:36 executing program 2: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8927, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:36 executing program 1: accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:12:36 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="030000", 0x3, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x40) 01:12:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, [@RTA_PRIORITY={0x8, 0x6, 0x1f}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x2c}}, 0x0) 01:12:36 executing program 1: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) 01:12:36 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) 01:12:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}]}, 0x18}}, 0x40) 01:12:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c0000001000010200000000000000000c00000a240001"], 0x9c}}, 0x0) [ 318.022281][ T9362] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) [ 318.060566][ T9372] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 01:12:36 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x89a1, &(0x7f0000001500)) [ 318.069032][ T9372] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.109905][ T9362] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1a, 0x4) 01:12:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 318.166212][ T9362] EXT4-fs (loop4): get root inode failed [ 318.203446][ T9362] EXT4-fs (loop4): mount failed 01:12:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x3, &(0x7f0000000900)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 01:12:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 01:12:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000", 0x4, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:36 executing program 1: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001740)='cgroup.type\x00', 0x2, 0x0) 01:12:37 executing program 5: r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000001000000080001004126"], 0x20}}, 0x0) 01:12:37 executing program 3: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)) 01:12:37 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001600), 0x8) [ 318.519063][ T9411] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) [ 318.548582][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 318.552621][ T9411] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 318.580089][ T9411] EXT4-fs (loop4): get root inode failed [ 318.590078][ T9411] EXT4-fs (loop4): mount failed 01:12:37 executing program 0: socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 01:12:37 executing program 1: getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000003c0), 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') 01:12:37 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x24008051) [ 318.617662][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 01:12:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 01:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680)='nl80211\x00') sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:12:37 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x4c}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000", 0x4, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0x3, &(0x7f0000000fc0)=@framed, &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001100), 0x8, 0x10, 0x0}, 0x78) 01:12:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000004080102000000000000000002000007050003000600000005000300210000001c0004800800074000000a7808000740000000060800064000007b48060002"], 0x50}}, 0x0) [ 318.892776][ T9443] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) 01:12:37 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000002a40)) 01:12:37 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x2}, 0x24) [ 318.965347][ T9443] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 318.978028][ T9443] EXT4-fs (loop4): get root inode failed [ 318.984819][ T9443] EXT4-fs (loop4): mount failed 01:12:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000", 0x4, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:37 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x63}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:37 executing program 3: socketpair(0x2a, 0x2, 0x0, &(0x7f0000002a40)) 01:12:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002680)='nl80211\x00') sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:12:37 executing program 2: r0 = epoll_create(0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x50000002}) 01:12:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000012c0)={0x14, 0x7, 0xa, 0x801}, 0x14}}, 0x0) [ 319.274988][ T9467] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (11833!=0) [ 319.307262][ T9467] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:37 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000002a40)={0xffffffffffffffff}) accept$ax25(r0, 0x0, 0x0) 01:12:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x80}, 0x40) 01:12:37 executing program 5: [ 319.374624][ T9467] EXT4-fs (loop4): get root inode failed [ 319.478038][ T9467] EXT4-fs (loop4): mount failed 01:12:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x639, 0x1}, 0x40) 01:12:38 executing program 3: socketpair(0x2c, 0x3, 0x4, &(0x7f0000004080)) 01:12:38 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002380)={&(0x7f0000002200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f00000022c0)=""/130, 0x29, 0x82, 0x1}, 0x20) 01:12:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:38 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:38 executing program 0: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x89a0, &(0x7f0000001500)) 01:12:38 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) 01:12:38 executing program 3: socketpair(0x3, 0x80000, 0x8ed, &(0x7f0000000000)) 01:12:38 executing program 5: r0 = socket(0x1e, 0x4, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) 01:12:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8e, &(0x7f0000000180)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0xfffffffffffffe22}, 0x14}}, 0x0) [ 319.854636][ T9498] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic) [ 319.896578][ T9498] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated 01:12:38 executing program 0: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001f40)='NLBL_UNLBL\x00') 01:12:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 319.950700][ T9498] EXT4-fs (loop4): get root inode failed [ 319.962171][ T9498] EXT4-fs (loop4): mount failed 01:12:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:12:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:38 executing program 3: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4004090) 01:12:38 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETCOUNT(r0, 0x5421, &(0x7f0000000040)) 01:12:38 executing program 5: getpeername$llc(0xffffffffffffffff, 0x0, 0x0) 01:12:38 executing program 0: socketpair(0xf, 0x3, 0x0, &(0x7f0000000000)) 01:12:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 320.230818][ T9524] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) 01:12:38 executing program 2: socket(0x1d, 0x0, 0xfffffffc) 01:12:38 executing program 3: sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:12:38 executing program 5: pipe(&(0x7f0000000800)={0xffffffffffffffff}) r1 = socket$pptp(0x18, 0x1, 0x2) splice(r1, 0x0, r0, 0x0, 0x4, 0x0) [ 320.289416][ T9524] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 320.302640][ T9524] EXT4-fs (loop4): get root inode failed [ 320.308736][ T9524] EXT4-fs (loop4): mount failed 01:12:39 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x541b, &(0x7f00000000c0)={'wlan0\x00'}) 01:12:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080), 0x4) 01:12:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x59) 01:12:39 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/mnt\x00') 01:12:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x4e20, @remote}}]}, 0x50}}, 0x40) 01:12:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003180)={0x1c, 0x3, 0x8, 0xc03, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) 01:12:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 320.648118][ T9552] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 320.686037][ T9552] EXT4-fs error (device loop4): ext4_fill_super:4720: inode #2: comm syz-executor.4: iget: root inode unallocated [ 320.700581][ T9552] EXT4-fs (loop4): get root inode failed [ 320.706300][ T9552] EXT4-fs (loop4): mount failed 01:12:39 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200, 0x0) 01:12:39 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0x1d, &(0x7f0000000040)={0x81}, 0x8) 01:12:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:39 executing program 3: bpf$BPF_BTF_LOAD(0x7, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 01:12:39 executing program 1: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x0, @remote}}]}, 0x50}}, 0x0) [ 320.929939][ T9578] EXT4-fs (loop4): unsupported descriptor size 0 01:12:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 01:12:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:39 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x7, 0x0, 0x0, 0x9284}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:39 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x89f8, 0x0) 01:12:39 executing program 1: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x4, 0x6, 0x401}, 0x14}}, 0x0) [ 321.199250][ T9600] EXT4-fs (loop4): unsupported descriptor size 0 01:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x20}, 0x0) 01:12:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:39 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00') 01:12:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in={0x2, 0x0, @remote}}]}, 0x50}}, 0x0) 01:12:39 executing program 0: recvfrom$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:12:39 executing program 1: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) 01:12:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:40 executing program 2: r0 = socket(0x2a, 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 01:12:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:40 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x1c}}, 0x0) [ 321.525844][ T9620] EXT4-fs (loop4): unsupported descriptor size 0 01:12:40 executing program 0: r0 = socket(0x2a, 0x2, 0x0) sendto(r0, &(0x7f0000000080)="154a02b130c8d72f1f6a86d36da3ad4866d31f087d984346afb76eef315f4fdff3ac08709d5193cd36fb0371bc17f7e4b76bc16c36e9d25e09757853d0d80c084893405730024d4ab488fe26beb6cedb3321db60b7e36af7dac110eb12f4a0d3cd504abbbdcf11863d435d64543518cb190fdda3b44f8fa87f62fcd6881df6a40f9c8137b1979f848e04df9e26e7f76cb12de775f1a9dbfc7fa8d37cdbd53b", 0x9f, 0x24000810, &(0x7f00000011c0)=@l2tp={0x2, 0x0, @broadcast}, 0xc1) 01:12:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 321.660102][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:12:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000840)={0x1, 'wlan0\x00'}) [ 321.833808][ T9642] EXT4-fs (loop4): unsupported descriptor size 0 01:12:40 executing program 5: r0 = socket(0x2a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 01:12:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4040000}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:12:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) [ 322.067905][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:12:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:40 executing program 0: pipe(&(0x7f0000000480)) 01:12:40 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) [ 322.131453][ T9662] EXT4-fs (loop4): unsupported descriptor size 0 01:12:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x14, 0x1, 0x3, 0x401}, 0x14}}, 0x0) 01:12:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 322.267000][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:12:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) 01:12:40 executing program 0: bpf$BPF_BTF_LOAD(0x16, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 01:12:40 executing program 2: getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) 01:12:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 5: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x1}, 0x14}}, 0x0) [ 322.414789][ T9678] EXT4-fs (loop4): unsupported descriptor size 0 01:12:41 executing program 0: r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) [ 322.486171][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 01:12:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) 01:12:41 executing program 3: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:41 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 01:12:41 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='.\x00'}, 0x10) 01:12:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x8, 0x80}, 0x40) [ 322.724433][ T9701] EXT4-fs (loop4): unsupported descriptor size 0 01:12:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:12:41 executing program 3: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x40) 01:12:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:12:41 executing program 0: sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008dc0)='TIPCv2\x00') 01:12:41 executing program 3: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 323.001384][ T9720] EXT4-fs (loop4): unsupported descriptor size 0 01:12:41 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}]}, 0x18}}, 0x0) 01:12:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:12:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xf, 0x0, 0x0, 0x165}, 0x1d) 01:12:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003180)={0x30, 0x3, 0x8, 0xc03, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x30}}, 0x0) 01:12:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 323.285450][ T9740] EXT4-fs (loop4): unsupported descriptor size 0 01:12:41 executing program 0: getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003c00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000008dc0)='TIPCv2\x00') 01:12:41 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003180)={0x28, 0x3, 0x8, 0xc03, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x28}}, 0x0) 01:12:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) [ 323.574624][ T9759] EXT4-fs (loop4): unsupported descriptor size 0 01:12:42 executing program 2: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x9af05f4cb94920de) 01:12:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x5}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8}]}, 0x54}}, 0x0) 01:12:42 executing program 5: socketpair(0x28, 0x80002, 0x0, &(0x7f0000000000)) 01:12:42 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 323.741148][ T9769] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 01:12:42 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044944, &(0x7f0000001500)) 01:12:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) 01:12:42 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, 0x24) 01:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:42 executing program 5: 01:12:42 executing program 2: [ 323.863113][ T9778] EXT4-fs (loop4): unsupported descriptor size 0 01:12:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a", 0x10, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:42 executing program 0: 01:12:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) 01:12:42 executing program 2: 01:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:42 executing program 5: 01:12:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, 0x0, 0x0) [ 324.162045][ T9793] EXT4-fs (loop4): unsupported descriptor size 0 01:12:42 executing program 5: 01:12:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:42 executing program 0: 01:12:42 executing program 2: 01:12:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:12:43 executing program 5: 01:12:43 executing program 2: 01:12:43 executing program 0: [ 324.520519][ T9812] EXT4-fs (loop4): unsupported descriptor size 0 01:12:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0) 01:12:43 executing program 0: 01:12:43 executing program 2: 01:12:43 executing program 5: 01:12:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:12:43 executing program 0: 01:12:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0) 01:12:43 executing program 2: 01:12:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 01:12:43 executing program 5: [ 324.836649][ T9827] EXT4-fs (loop4): unsupported descriptor size 0 01:12:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:43 executing program 2: 01:12:43 executing program 0: 01:12:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0) 01:12:43 executing program 5: 01:12:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c89", 0x18, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:43 executing program 2: 01:12:43 executing program 5: 01:12:43 executing program 0: 01:12:43 executing program 1: [ 325.167494][ T9848] EXT4-fs (loop4): unsupported descriptor size 0 01:12:43 executing program 5: 01:12:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:43 executing program 0: 01:12:44 executing program 1: 01:12:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 01:12:44 executing program 5: 01:12:44 executing program 2: 01:12:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:44 executing program 1: [ 325.466499][ T9863] EXT4-fs (loop4): unsupported descriptor size 0 01:12:44 executing program 2: 01:12:44 executing program 0: 01:12:44 executing program 5: 01:12:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:44 executing program 1: 01:12:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:44 executing program 2: 01:12:44 executing program 5: 01:12:44 executing program 0: [ 325.794039][ T9880] EXT4-fs (loop4): unsupported descriptor size 0 01:12:44 executing program 1: 01:12:44 executing program 5: 01:12:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x7, 0x0, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x10}]}, 0x54}}, 0x0) 01:12:44 executing program 2: 01:12:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045", 0x1c, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:44 executing program 0: 01:12:44 executing program 1: 01:12:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}}, 0x0) 01:12:44 executing program 5: 01:12:44 executing program 0: [ 326.183410][ T9897] EXT4-fs (loop4): unsupported descriptor size 0 01:12:44 executing program 2: 01:12:44 executing program 5: 01:12:44 executing program 1: 01:12:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:45 executing program 0: 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0) 01:12:45 executing program 2: 01:12:45 executing program 5: 01:12:45 executing program 1: 01:12:45 executing program 5: 01:12:45 executing program 0: [ 326.527103][ T9913] EXT4-fs (loop4): unsupported descriptor size 0 01:12:45 executing program 2: 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0) 01:12:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:45 executing program 1: 01:12:45 executing program 5: 01:12:45 executing program 0: 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x40, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_FLAGS={0x8}]}, 0x40}}, 0x0) 01:12:45 executing program 2: 01:12:45 executing program 0: 01:12:45 executing program 1: [ 326.852765][ T9928] EXT4-fs (loop4): unsupported descriptor size 0 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x0) 01:12:45 executing program 5: 01:12:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f2800450100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:45 executing program 0: 01:12:45 executing program 2: 01:12:45 executing program 1: [ 327.064954][ T9941] EXT4-fs (loop4): unsupported descriptor size 0 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) 01:12:45 executing program 5: 01:12:45 executing program 0: 01:12:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:45 executing program 2: 01:12:45 executing program 1: 01:12:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:12:45 executing program 0: 01:12:45 executing program 2: 01:12:45 executing program 5: 01:12:45 executing program 0: [ 327.353312][ T9954] EXT4-fs (loop4): unsupported descriptor size 0 01:12:46 executing program 1: 01:12:46 executing program 5: 01:12:46 executing program 0: 01:12:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:46 executing program 2: 01:12:46 executing program 1: 01:12:46 executing program 3: 01:12:46 executing program 5: 01:12:46 executing program 2: 01:12:46 executing program 3: [ 327.727464][ T9970] EXT4-fs (loop4): unsupported descriptor size 0 01:12:46 executing program 3: 01:12:46 executing program 5: 01:12:46 executing program 0: 01:12:46 executing program 2: 01:12:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:46 executing program 1: 01:12:46 executing program 3: 01:12:46 executing program 5: 01:12:46 executing program 0: 01:12:46 executing program 2: 01:12:46 executing program 1: [ 328.076426][ T9986] EXT4-fs (loop4): unsupported descriptor size 0 01:12:46 executing program 1: 01:12:46 executing program 0: 01:12:46 executing program 2: 01:12:46 executing program 1: 01:12:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:46 executing program 3: 01:12:46 executing program 5: 01:12:46 executing program 3: [ 328.301916][ T9996] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:46 executing program 0: 01:12:46 executing program 1: 01:12:47 executing program 2: 01:12:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:47 executing program 3: 01:12:47 executing program 5: 01:12:47 executing program 0: 01:12:47 executing program 1: 01:12:47 executing program 2: [ 328.575465][T10010] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:47 executing program 3: 01:12:47 executing program 5: 01:12:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:47 executing program 2: 01:12:47 executing program 0: 01:12:47 executing program 1: 01:12:47 executing program 3: 01:12:47 executing program 5: 01:12:47 executing program 1: [ 328.902860][T10022] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:47 executing program 2: 01:12:47 executing program 0: 01:12:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:47 executing program 3: 01:12:47 executing program 1: 01:12:47 executing program 5: 01:12:47 executing program 2: 01:12:47 executing program 0: 01:12:47 executing program 3: [ 329.149953][T10035] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:47 executing program 1: 01:12:47 executing program 5: 01:12:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:48 executing program 2: 01:12:48 executing program 0: 01:12:48 executing program 3: 01:12:48 executing program 1: 01:12:48 executing program 5: 01:12:48 executing program 2: [ 329.507419][T10050] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:48 executing program 3: 01:12:48 executing program 1: 01:12:48 executing program 2: 01:12:48 executing program 0: 01:12:48 executing program 5: 01:12:48 executing program 3: 01:12:48 executing program 0: 01:12:48 executing program 1: 01:12:48 executing program 5: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x2, &(0x7f0000001500)) 01:12:48 executing program 2: [ 329.835142][T10063] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:48 executing program 1: 01:12:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:48 executing program 2: 01:12:48 executing program 3: 01:12:48 executing program 0: 01:12:48 executing program 5: 01:12:48 executing program 1: 01:12:48 executing program 2: [ 330.126759][T10076] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:48 executing program 3: 01:12:48 executing program 2: 01:12:48 executing program 1: 01:12:48 executing program 0: 01:12:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:48 executing program 5: 01:12:48 executing program 1: 01:12:48 executing program 3: 01:12:49 executing program 5: 01:12:49 executing program 2: 01:12:49 executing program 0: [ 330.445454][T10091] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:49 executing program 3: 01:12:49 executing program 2: 01:12:49 executing program 5: 01:12:49 executing program 1: 01:12:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:49 executing program 3: 01:12:49 executing program 0: 01:12:49 executing program 2: 01:12:49 executing program 1: 01:12:49 executing program 3: 01:12:49 executing program 5: [ 330.757923][T10106] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:49 executing program 2: 01:12:49 executing program 0: 01:12:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:49 executing program 3: 01:12:49 executing program 1: 01:12:49 executing program 5: 01:12:49 executing program 0: 01:12:49 executing program 2: 01:12:49 executing program 3: [ 331.104028][T10118] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:49 executing program 1: 01:12:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:49 executing program 5: 01:12:49 executing program 0: 01:12:49 executing program 3: 01:12:49 executing program 2: 01:12:50 executing program 1: 01:12:50 executing program 0: [ 331.422407][T10133] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:50 executing program 5: 01:12:50 executing program 1: 01:12:50 executing program 3: 01:12:50 executing program 2: 01:12:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9", 0x33, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:50 executing program 5: 01:12:50 executing program 0: 01:12:50 executing program 1: 01:12:50 executing program 2: 01:12:50 executing program 3: 01:12:50 executing program 0: [ 331.781976][T10147] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:50 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:12:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) read$char_raw(r0, &(0x7f0000000000)={""/49227}, 0xc200) 01:12:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x40002101, 0x0) 01:12:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:50 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) write$nbd(r0, 0x0, 0x0) 01:12:50 executing program 0: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x20, 0x0) 01:12:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) 01:12:50 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 01:12:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010100}, 0x80) [ 332.169592][T10167] EXT4-fs (loop4): invalid first ino: 0 01:12:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r0, &(0x7f0000000180)=@un=@abs, 0x80) 01:12:50 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x9d) 01:12:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:50 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect(r0, &(0x7f0000000000)=@in={0x2, 0x4e21}, 0x80) getpeername(r0, 0x0, &(0x7f0000000140)) [ 332.442447][T10184] EXT4-fs (loop4): invalid first ino: 0 01:12:51 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60ec41, 0x0) 01:12:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x40002021, 0x0) 01:12:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) write$P9_RXATTRCREATE(r0, 0x0, 0x0) 01:12:51 executing program 3: r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 01:12:51 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000)="e7", 0x1) 01:12:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) 01:12:51 executing program 0: creat(&(0x7f0000000240)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 01:12:51 executing program 1: getrlimit(0xaff59843dcb0a998, 0x0) [ 332.967941][T10205] EXT4-fs (loop4): invalid first ino: 0 01:12:51 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x9) 01:12:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:51 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000180), 0xffffffffffffff0e) [ 333.251788][T10223] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:52 executing program 5: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2) inotify_rm_watch(r0, r1) 01:12:52 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xffffff63) 01:12:52 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) read$char_raw(r0, 0x0, 0x0) 01:12:52 executing program 2: r0 = epoll_create(0x401) epoll_pwait(r0, 0x0, 0xffffffffffffff22, 0x0, 0x0, 0xfdb88e467dad977c) 01:12:52 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000034) 01:12:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 333.935872][T10245] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 01:12:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:12:52 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc000, 0x0) 01:12:52 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:12:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f}}], 0x1, 0x0) 01:12:52 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0) write$char_raw(r0, 0x0, 0x0) [ 334.249332][T10262] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 01:12:53 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x44000206) 01:12:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, 0x0, 0x4c, 0x0) 01:12:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 01:12:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:12:53 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x888) [ 334.865595][T10292] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$eventfd(r0, 0x0, 0x0) 01:12:53 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, &(0x7f0000000000), 0x0) 01:12:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x99) 01:12:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x282201, 0x0) write$cgroup_type(r0, 0x0, 0x0) 01:12:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:53 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 01:12:53 executing program 5: r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 01:12:53 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@remote, @private=0xa010101}, 0x8) 01:12:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f00000039c0), 0x0, 0x8000) 01:12:53 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) [ 335.191510][T10312] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:53 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0xfffffffffffffd8b) 01:12:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001600)=[{{&(0x7f00000000c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80, 0x0, 0xffffffffffffff85}}], 0x1, 0x0) 01:12:53 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, 0x0, 0xfffffffffffffef6) 01:12:54 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0xfffffffffffffe21) 01:12:54 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x7a9002, 0xe0) 01:12:54 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000100), 0x0, 0x40002001, 0x0) 01:12:54 executing program 5: creat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000182) [ 335.530858][T10334] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:54 executing program 2: r0 = epoll_create(0x8) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x15555855, 0x0, 0x0, 0x47) 01:12:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) 01:12:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) 01:12:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:54 executing program 5: r0 = semget(0x0, 0x0, 0x0) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000240)=""/182) 01:12:54 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) 01:12:54 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 01:12:54 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001600), 0x0, 0x40) 01:12:54 executing program 3: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000100)='.\x00', 0x10000a40) [ 335.896084][T10356] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:54 executing program 0: r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) 01:12:54 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x60242, 0x0) write$P9_RLINK(r0, 0x0, 0x0) 01:12:54 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x6dc340, 0x19c) 01:12:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:54 executing program 3: r0 = epoll_create(0x8) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 01:12:54 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) 01:12:54 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @broadcast}, 0x10) 01:12:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080), 0x4) 01:12:54 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) read$char_raw(r0, &(0x7f0000000000)={""/49227}, 0xc200) 01:12:54 executing program 2: r0 = semget(0x0, 0x0, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) [ 336.218367][T10379] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:54 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x161042, 0x0) write$9p(r0, 0x0, 0x0) 01:12:54 executing program 5: r0 = epoll_create(0x8) epoll_pwait(r0, 0x0, 0x2a, 0x0, 0x0, 0x0) 01:12:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200", 0x63, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8000) 01:12:55 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 01:12:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0xfffffffffffffee9) 01:12:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) [ 336.560416][T10398] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:55 executing program 1: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x440b01, 0x0) 01:12:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:12:55 executing program 2: r0 = epoll_create(0x401) epoll_pwait(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdca) 01:12:55 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x60ec41, 0x0) 01:12:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:55 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) 01:12:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) 01:12:55 executing program 1: setreuid(0xee00, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setreuid(0xee00, r0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 337.165953][T10428] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:55 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0x343, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) 01:12:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000440)) 01:12:55 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002040)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 01:12:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4094, 0xffe}], 0x1, 0x0, 0x0) 01:12:56 executing program 5: unshare(0x2020000) 01:12:56 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@dev, @private=0xa010102}, 0xc) 01:12:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}) [ 337.475218][T10447] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) 01:12:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d242000012", 0x65, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:56 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, 0x0) 01:12:56 executing program 1: sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', &(0x7f0000000140)=@default_ibss_ssid, 0x6, 0x0) 01:12:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x3d6, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) [ 337.647660][ T2668] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 337.752791][T10463] EXT4-fs (loop4): fragment/cluster size (16384) != block size (1024) [ 337.798557][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 337.811037][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.826998][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.840640][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 338.038224][ T2668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.063395][ T2668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.087033][ T2668] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.112527][ T2668] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 338.156831][ T2668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.195463][ T2668] usb 3-1: config 0 descriptor?? [ 338.699532][ T2668] wacom 0003:056A:0343.0001: hidraw0: USB HID v0.00 Device [HID 056a:0343] on usb-dummy_hcd.2-1/input0 [ 338.906959][ T12] usb 3-1: USB disconnect, device number 2 [ 339.687584][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 340.058161][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.077438][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.087972][ T12] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.101352][ T12] usb 3-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 340.111002][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.132644][ T12] usb 3-1: config 0 descriptor?? 01:12:58 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x3e) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 01:12:58 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045505, 0x0) 01:12:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x49, 0x0, 0x0) 01:12:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805, 0x0) write(r0, &(0x7f0000000080)="93", 0x1) 01:12:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000001c0)=0x40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4621, @dev}, 0x10) [ 340.417736][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 340.449004][ T12] usbhid: probe of 3-1:0.0 failed with error -71 01:12:59 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000e40)=ANY=[@ANYBLOB="b702000000400400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040000010000001704000009000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000a93e90832ff9d40a409f01f6147c8f6fd267bf410e76c540106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdc4ea29f673efc20c07ec082bc6de68ab0a5ebf4ee60253516cc871311ab25868e1d9a014263697ca83c57fc2ead0d85a2bcc922a3aa71489fa0000c1a6ec9aa2e28000004bcff56cf5a84cefb43ea72351190a711fd2b83a3596d80729476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a4fed35f16ae8b3aa4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb79951084e7113c77ae25a0121de52e5e8cceddf2cb4b9895c0738fda3ea38c09e75b1f39ae8af2c746fbb43e3530767d8ee296487c0e650ead9003d032008fee2e02ece680c0d3d19b2b62fc202240219f497e89548a2977f86137ecb5753dfc87f148ed2392ef113cbe241a98b4e8f3bf878f1dc0e115dd1c328f54369bc8dfd3a4ea21259ed518ae80606ef93d69b9d0d972b2211d05b2e31d61bf49ca69bdb0f57d5f16769d1605e8045c6880b425f8575f863a7e1b7174281ab87fba93555853df9dbd3da536d88168217230eabfaf7ff9b0146acffea06f3b0ba7b7357ba84c953523e92ee8cc4d8be0050000002c305d59cb68bff089979504c71418bd62ec60cfae7d75ce2adc8d4b2eabae5937b47e07da3f62be170ac03ca60b10c8123a7ae91659fc79fc36c84dd1b2b8975c2544e3b50acd3b00000000000d62fae930c2308e2401bb761565ac4eda4ca118ebbe000000000000000000000000000000a52d598dbcfeb90dd310175435c843624027f7d55431a5756e4be9698bcd550c272c391cf24ea56d016e1f21b5999e1448f8784db6a9d4f36ec14cc67fcdd41c8ba146dc7d3fb07df9687b95efcd74ad8d0b15234dab4da83fa33391a2925b49f6040087cfaa9f83a6cdb0e031d9eb6cbff6eba616992f3ba6c277e7820a229c75b284365d650b9f057394a543c3210df7268ec32ac38db9d3062571ec8eb3290bb4a823674e89cf1716d4bc9fac0c47d854632a1d943a9dc58e6f4d0b687a055983a46fdd52f3c87506ae419c604f62b56ad1420eca5484ee0092563332124c612f4b79f2763a2288644bbe0d29c4d0cb1da9b7f9ded1c69fc42465ed5ba385d6be8843ee4f48c9c913c00f1869c7d815313aa7081597811fe82a4e044e76d8cd4c3ee7460ec713f1048c453393734b3b4f9b972c7e85dbf2fff1ef1ad15024f9439039dc"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xb500}], 0x1, 0x0) [ 340.465262][T10501] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x16) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc}, @md5sig={0x13, 0x12, "5e92bdf30173ceb8a52fd2384d1147c7"}]}}}}}}}}, 0x0) 01:12:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 340.508801][ T12] usb 3-1: USB disconnect, device number 3 [ 340.543520][ C1] hrtimer: interrupt took 44990 ns 01:12:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045519, 0x0) 01:12:59 executing program 2: 01:12:59 executing program 3: 01:12:59 executing program 3: 01:12:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x16) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x3, 0x3}, @sack={0x5, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc}, @md5sig={0x13, 0x12, "5e92bdf30173ceb8a52fd2384d1147c7"}]}}}}}}}}, 0x0) [ 340.831106][T10528] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002cc0)='nl80211\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="c4972cbccbf4"}, @NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x4}, {0x4}, {0xc, 0x0, @random="9e43b7d163874fce"}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 01:12:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x600, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r1}}, 0x48) 01:12:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000340)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cgroup.controllers\x00', 0x275a, 0x0) 01:12:59 executing program 5: 01:12:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:12:59 executing program 3: 01:12:59 executing program 5: 01:12:59 executing program 0: 01:12:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x600, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r1}}, 0x48) 01:12:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x600, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r1}}, 0x48) [ 341.180127][T10548] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 01:12:59 executing program 2: 01:12:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x0, &(0x7f00000000c0)=ANY=[]) 01:12:59 executing program 3: 01:13:00 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x600, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r1}}, 0x48) 01:13:00 executing program 0: 01:13:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0x2, 0x600, 0x0, @local}, {0x2, 0x0, 0xfff7fdc0, @loopback}, r1}}, 0x48) 01:13:00 executing program 2: [ 341.494769][T10563] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:00 executing program 3: 01:13:00 executing program 0: [ 341.585265][T10563] EXT4-fs (loop4): group descriptors corrupted! 01:13:00 executing program 2: 01:13:00 executing program 5: 01:13:00 executing program 1: 01:13:00 executing program 3: 01:13:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x0, &(0x7f00000000c0)=ANY=[]) 01:13:00 executing program 0: 01:13:00 executing program 2: 01:13:00 executing program 5: 01:13:00 executing program 1: 01:13:00 executing program 3: 01:13:00 executing program 0: [ 341.955598][T10584] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:00 executing program 5: 01:13:00 executing program 2: [ 342.038699][T10584] EXT4-fs (loop4): group descriptors corrupted! 01:13:00 executing program 1: 01:13:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x0, &(0x7f00000000c0)=ANY=[]) 01:13:00 executing program 3: 01:13:00 executing program 0: 01:13:00 executing program 5: 01:13:00 executing program 2: 01:13:00 executing program 1: 01:13:00 executing program 2: [ 342.354654][T10600] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:01 executing program 5: 01:13:01 executing program 0: 01:13:01 executing program 3: 01:13:01 executing program 3: [ 342.424355][T10600] EXT4-fs (loop4): group descriptors corrupted! 01:13:01 executing program 1: 01:13:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, 0x0) 01:13:01 executing program 3: 01:13:01 executing program 2: 01:13:01 executing program 0: 01:13:01 executing program 5: 01:13:01 executing program 1: 01:13:01 executing program 3: 01:13:01 executing program 5: 01:13:01 executing program 0: 01:13:01 executing program 2: 01:13:01 executing program 3: 01:13:01 executing program 1: 01:13:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, 0x0) 01:13:01 executing program 2: 01:13:01 executing program 3: 01:13:01 executing program 5: 01:13:01 executing program 0: 01:13:01 executing program 1: 01:13:01 executing program 2: 01:13:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, 0x0) 01:13:01 executing program 3: 01:13:01 executing program 0: 01:13:01 executing program 2: 01:13:01 executing program 5: 01:13:01 executing program 3: 01:13:01 executing program 5: 01:13:01 executing program 1: 01:13:01 executing program 0: 01:13:02 executing program 2: 01:13:02 executing program 3: 01:13:02 executing program 4: 01:13:02 executing program 5: 01:13:02 executing program 0: 01:13:02 executing program 1: 01:13:02 executing program 4: 01:13:02 executing program 2: 01:13:02 executing program 0: 01:13:02 executing program 3: 01:13:02 executing program 5: 01:13:02 executing program 1: 01:13:02 executing program 4: 01:13:02 executing program 2: 01:13:02 executing program 0: 01:13:02 executing program 1: 01:13:02 executing program 3: 01:13:02 executing program 5: 01:13:02 executing program 4: 01:13:02 executing program 2: 01:13:02 executing program 0: 01:13:02 executing program 3: 01:13:02 executing program 5: 01:13:02 executing program 1: 01:13:02 executing program 2: 01:13:02 executing program 4: 01:13:02 executing program 5: 01:13:02 executing program 3: 01:13:02 executing program 0: 01:13:02 executing program 1: 01:13:03 executing program 3: 01:13:03 executing program 0: 01:13:03 executing program 2: 01:13:03 executing program 4: 01:13:03 executing program 5: 01:13:03 executing program 1: 01:13:03 executing program 2: 01:13:03 executing program 3: 01:13:03 executing program 0: 01:13:03 executing program 5: 01:13:03 executing program 4: 01:13:03 executing program 2: 01:13:03 executing program 0: 01:13:03 executing program 1: socketpair(0x0, 0x0, 0xfffffffe, &(0x7f0000000280)) 01:13:03 executing program 3: r0 = fsopen(&(0x7f0000000700)='bfs\x00', 0x0) fsmount(r0, 0x0, 0x0) 01:13:03 executing program 5: getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, 0x0) socket(0x2, 0x1, 0x2) 01:13:03 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000001900)={{0x77359400}}, &(0x7f0000001940)) 01:13:03 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='/dev/null\x00', &(0x7f0000000040)=',#+)\'(/}[\x00', 0x0) 01:13:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}}, {{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x18}}], 0x2, 0x0) 01:13:03 executing program 3: pipe2(&(0x7f0000001640), 0x0) 01:13:03 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9, 0x100}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x3, 0x4, 0x2, 0x0, r0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x5, 0x5, 0x7, 0x9}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x173) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) 01:13:03 executing program 2: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) 01:13:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 01:13:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="cb9ac0955dae950402d8b4ac000000a0", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x8dffffff}], 0x1, 0x0) 01:13:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @empty, @mcast2, 0x0, 0x6}) 01:13:03 executing program 5: syz_genetlink_get_family_id$batadv(0x0) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 01:13:03 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x208000, 0x0) 01:13:03 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={0x0}}, 0x0) 01:13:04 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x402540, 0x0) 01:13:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) 01:13:04 executing program 4: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:04 executing program 3: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x0, 0x0) 01:13:04 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 01:13:04 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10}, 0x78) 01:13:04 executing program 1: add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="f0", 0x1, 0xffffffffffffffff) 01:13:04 executing program 5: syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0x0, 0x0) 01:13:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:13:04 executing program 3: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 01:13:04 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000100)) 01:13:04 executing program 3: request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='%)\x00', 0xffffffffffffffff) 01:13:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x12a8}, 0x0) 01:13:04 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000003940)={&(0x7f0000003880), 0xc, &(0x7f0000003900)={0x0}}, 0x8d1) 01:13:04 executing program 4: syz_80211_join_ibss(&(0x7f00000004c0)='wlan0\x00', &(0x7f0000000500)=@random="ee", 0x1, 0x0) 01:13:04 executing program 5: socketpair(0x21, 0x0, 0x0, &(0x7f0000000040)) 01:13:04 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffeffff, 0x40) 01:13:04 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) 01:13:04 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 01:13:05 executing program 1: syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x0) 01:13:05 executing program 5: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:13:05 executing program 2: add_key(0x0, 0x0, 0x0, 0x0, 0x0) 01:13:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) 01:13:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) dup3(r0, r1, 0x0) dup3(r0, r3, 0x0) 01:13:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @empty, @mcast2, 0x0, 0x6, 0x9}) 01:13:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:05 executing program 2: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x282) 01:13:05 executing program 1: accept$ax25(0xffffffffffffffff, 0x0, 0x0) 01:13:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x20) 01:13:05 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 01:13:05 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 01:13:05 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 01:13:05 executing program 2: syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0x0, 0x100840) 01:13:05 executing program 0: timer_create(0x0, &(0x7f0000001540)={0x0, 0x0, 0x4, @thr={&(0x7f0000000440), 0x0}}, 0x0) 01:13:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 01:13:05 executing program 4: fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:13:05 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x2) 01:13:05 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='%)\x00', 0xffffffffffffffff) 01:13:05 executing program 0: request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0) 01:13:05 executing program 4: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:13:05 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 01:13:05 executing program 3: unshare(0x40000) 01:13:05 executing program 0: timer_create(0x0, &(0x7f0000001540)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0) 01:13:05 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f00000006c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) 01:13:05 executing program 1: socketpair(0x0, 0x8000f, 0x0, &(0x7f0000000000)) 01:13:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142ff70000020000000024000000000000000000000007000000440c5101ffffffff0000000794040000000000000000000018000000000000000000000007"], 0x60}}], 0x1, 0x0) 01:13:05 executing program 4: syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x16041) 01:13:06 executing program 2: pipe2(&(0x7f0000001640), 0x84800) 01:13:06 executing program 1: socketpair(0x2c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00') 01:13:06 executing program 5: socketpair(0x3, 0x0, 0xffff6874, &(0x7f0000000000)) 01:13:06 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000003640)='gtp\x00') 01:13:06 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x0) 01:13:06 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x14, &(0x7f00000000c0)=""/20, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:06 executing program 2: openat$full(0xffffffffffffff9c, 0x0, 0x48c101, 0x0) 01:13:06 executing program 1: clock_getres(0x2, &(0x7f0000000740)) 01:13:06 executing program 0: getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 01:13:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x82c0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 01:13:06 executing program 2: 01:13:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3b8, 0x1e8, 0xe8, 0x2d0, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@arp={@empty, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'wlan1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00'}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2786ff5c2c0051f2dd18163e09b193e20b46a27f6887223e786c007ce5a4"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x408) 01:13:06 executing program 4: openat$mixer(0xffffffffffffff9c, &(0x7f0000003ac0)='/dev/mixer\x00', 0x0, 0x0) 01:13:06 executing program 1: timer_create(0x0, 0x0, &(0x7f00000001c0)) timer_getoverrun(0x0) 01:13:06 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 01:13:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 347.923461][T10887] x_tables: duplicate underflow at hook 1 01:13:06 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003080)={'syztnl2\x00', 0x0}) 01:13:06 executing program 5: sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000005a00)={0x0, @multicast1, 0x4e24, 0x0, 'fo\x00'}, 0x2c) 01:13:06 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000580)='l2tp\x00') 01:13:06 executing program 1: getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000003a00)) 01:13:06 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) 01:13:06 executing program 2: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x20) 01:13:06 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000080)="da"}) [ 348.169265][T10905] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 01:13:06 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) getpeername$l2tp(r0, 0x0, 0x0) 01:13:06 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) [ 348.246331][T10908] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 01:13:06 executing program 5: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) 01:13:06 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 01:13:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r0, 0x0, 0x0) 01:13:07 executing program 1: fsopen(&(0x7f0000000140)='dax\x00', 0x0) 01:13:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000080)="dad567977ecf5a2ca5"}) 01:13:07 executing program 4: request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x0) 01:13:07 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:13:07 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000005740)='/dev/full\x00', 0x8200, 0x0) 01:13:07 executing program 3: add_key(&(0x7f00000004c0)='ceph\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0x0) 01:13:07 executing program 2: pkey_mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x2000002, 0xffffffffffffffff) 01:13:07 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x40) 01:13:07 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmsg$can_raw(r0, 0x0, 0x0) 01:13:07 executing program 3: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:07 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:07 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{}, [@map]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:07 executing program 5: syz_genetlink_get_family_id$batadv(&(0x7f0000000540)='batadv\x00') 01:13:07 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) connect$l2tp6(r0, 0x0, 0x0) 01:13:07 executing program 3: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x1, 0x80, "dbdc2b3ffb962f438918eee5e6bc11453e7d43f927d3b5d6602a6e286e45701d4d2188fa0eeb07e543f757adfe2a9b4c1f808879888f3e9cad4d8a8946c8e0", 0x18}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000000c0)="e4b2516ae552dba3f4722109aab228cafaf7f053c298ff85e6d8844b29c50efef18e788622b69516ac", 0x29}, {&(0x7f0000000100)="0dbc8d5072a7c9dd42892405eec8cf1fd432caed2a085d7cdece1c3de1414e6ba5b3559c073520f33ab6928e96199daa264be5d72870caf79b735c345b46467c870e05f9fb44e1b26a9cea6735ef508a84ed65412d3a444e78ba65e407967ce47e0872ae3c3cf64f2286940a82b9064ca5440feaf6af6938870974d625f54f51e8fc7f15865c144022b855bdefbaedff94ff45f7a91217ed9297", 0x9a}, {&(0x7f00000001c0)="be625a9350694706a517077d20ec9608960407ea7f0b6b9f8397363a09c705ad2bd9fa1577832c3865f25cdc2db423060769910679413d35a79938e1cf272835c580e48ff0bfee5ac02ff3d3ebfb7bb713d2ef258bd352e5168ca91b5c37ed7948df8c67efdc2c97da0ef60a461b58ab94d2fba8e80391d5dbbc0ccd5a3019b47076860def2badb7cf617df5bdcdd6e89a0f2a68206bb6820ec5ee1b02fa047e3525e6df7660cb9fb31548e87e4e35e2b0d76184d442699a94f092f0b602807aaa7de9d0", 0xc4}, {&(0x7f00000002c0)="fff0ce847d0c8a86930dbf70087b73144f9bb068f60d43", 0x17}, {&(0x7f0000000300)}, {&(0x7f0000000340)="450df28ef4f3b5dd59917b7f0a3c7da5a9230b9b54", 0x15}, {&(0x7f0000000380)="b07b3190273e1e306b5396410dd12fa728d269978f1a40958ca201fad2acb1f9b4dbb5753f0c99c6918619fdb2eb7f10cd828e06191306bbf1885fb5dad5a686ba63511af9c44be10a90bf0f3dde75140c0f23bf64080afc7dd5a6aa6b066d7016e4234f6ce9331a93b341985534dacaa35746d9802d2384be9dda5633272d7693bfa3e8e931804932714959b5d8af24ffe4e8f838e7b1ec09181060083947d0d061c24809a3badc91eb65ae726287871b87e0dc02814eabed74515a183a", 0xbe}], 0x7, &(0x7f0000000540)={0x10, 0x111, 0x9}, 0x10, 0x24008010}, 0xc000) clone3(&(0x7f0000000840)={0x50200000, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640), {0x13}, &(0x7f0000000680)=""/81, 0x51, &(0x7f0000000700)=""/249, 0x0}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/thread-self\x00', 0x0, 0x0) 01:13:07 executing program 0: request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 01:13:07 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x6, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x88ef}, 0x78) 01:13:07 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) 01:13:07 executing program 4: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:07 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000003940)={&(0x7f0000003880), 0xc, 0x0}, 0x0) [ 349.184941][T10960] IPVS: ftp: loaded support on port[0] = 21 01:13:07 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:07 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) 01:13:07 executing program 5: syz_open_dev$hidraw(&(0x7f0000005780)='/dev/hidraw#\x00', 0x4, 0x4e00) 01:13:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r0, 0x0, 0x208e24b) 01:13:08 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x200000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 01:13:08 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 01:13:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 01:13:08 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 01:13:08 executing program 2: timer_create(0x0, &(0x7f0000000180)={0x0, 0x36, 0x2, @thr={0x0, 0x0}}, &(0x7f00000001c0)) 01:13:08 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x1, &(0x7f0000000180)=@raw=[@alu], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:08 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 01:13:08 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000003940)={&(0x7f0000003880), 0xc, &(0x7f0000003900)={0x0}}, 0x0) 01:13:08 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:08 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={0x0}}, 0x8d1) 01:13:08 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 01:13:08 executing program 1: sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x1, 0x80, "dbdc2b3ffb962f438918eee5e6bc11453e7d43f927d3b5d6602a6e286e45701d4d2188fa0eeb07e543f757adfe2a9b4c1f808879888f3e9cad4d8a8946c8e0", 0x18}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000000c0)="e4b2516ae552dba3f4722109aab228cafaf7f053c298ff85e6d8844b29c50efef18e788622b69516ac", 0x29}, {&(0x7f0000000100)="0dbc8d5072a7c9dd42892405eec8cf1fd432caed2a085d7cdece1c3de1414e6ba5b3559c073520f33ab6928e96199daa264be5d72870caf7", 0x38}, {0x0}, {&(0x7f0000000300)}, {&(0x7f0000000340)="450df28ef4f3b5dd59917b7f0a3c7da5a9230b9b54", 0x15}, {&(0x7f0000000380)}], 0x6, &(0x7f0000000540)={0x10, 0x111, 0x9}, 0x10, 0x24008010}, 0xc000) clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000640), {0x13}, 0x0, 0x0, &(0x7f0000000700)=""/249, 0x0}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000d00)='/proc/thread-self\x00', 0x101000, 0x0) 01:13:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 01:13:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 01:13:08 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000005a00)={0x0, @multicast1, 0x4e24, 0x0, 'fo\x00'}, 0x2c) 01:13:08 executing program 5: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 01:13:08 executing program 3: sysfs$1(0x1, &(0x7f0000000000)='}$-{^\x00') [ 350.116935][T11039] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 01:13:08 executing program 2: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:08 executing program 4: syz_open_dev$hidraw(&(0x7f0000005780)='/dev/hidraw#\x00', 0x0, 0x0) 01:13:08 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3045e}, 0x78) 01:13:08 executing program 5: socket(0x2, 0x1, 0x2) 01:13:08 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0xb}, @generic={0x8, 0x6, 0x8, 0x6, 0x3}, @alu]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x14, &(0x7f00000000c0)=""/20, 0x41000, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x8}, 0x10}, 0x78) 01:13:08 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'syztnl2\x00', 0x0}) 01:13:08 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/kvm\x00', 0x0, 0x0) 01:13:09 executing program 1: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:09 executing program 4: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 01:13:09 executing program 3: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 01:13:09 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f}}, 0x20) 01:13:09 executing program 2: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:13:09 executing program 5: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) execve(&(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000005c0)=[&(0x7f0000000040)='selfposix_acl_access&[\x00']) 01:13:09 executing program 4: accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:13:09 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x0, @private, 0x0, 0x0, 'rr\x00'}, 0x2c) 01:13:09 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 01:13:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x0, 0x0, 'sh\x00', 0x0, 0x80000001, 0x1c}, 0x2c) 01:13:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x12, 0x2, 0x0, 0x6}, 0x40) 01:13:09 executing program 1: syz_open_dev$evdev(0x0, 0x0, 0x5075374a9faccef2) 01:13:09 executing program 5: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x208000, 0x0) sendmsg$AUDIT_USER_AVC(r0, 0x0, 0x0) 01:13:09 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 01:13:09 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 01:13:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:13:09 executing program 4: request_key(&(0x7f0000000140)='id_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 01:13:09 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3045e, r0}, 0x78) 01:13:09 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:09 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x6, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:10 executing program 3: mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 01:13:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) 01:13:10 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000003500)='/dev/vcsu\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) 01:13:10 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') 01:13:10 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000e00)={&(0x7f0000000000)={0x50, 0xfffffffffffffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:10 executing program 3: add_key(&(0x7f00000004c0)='ceph\x00', 0x0, 0x0, 0x0, 0x0) 01:13:10 executing program 4: r0 = fsopen(&(0x7f0000000700)='bfs\x00', 0x0) fsmount(r0, 0x0, 0x95) 01:13:10 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) unlink(0x0) rmdir(&(0x7f0000000000)='./file0\x00') 01:13:10 executing program 3: r0 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) 01:13:10 executing program 2: syz_80211_join_ibss(&(0x7f00000004c0)='wlan0\x00', 0x0, 0x0, 0x0) 01:13:10 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:10 executing program 4: timer_create(0x0, &(0x7f0000000180)={0x0, 0x36, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) 01:13:10 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) pipe2(&(0x7f00000012c0), 0x0) 01:13:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 01:13:10 executing program 1: socketpair(0x1e, 0x0, 0x101, &(0x7f0000002580)) 01:13:10 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) recvmsg$qrtr(r0, 0x0, 0x0, 0x0) 01:13:11 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 01:13:11 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) bind$l2tp(r0, 0x0, 0x0) 01:13:11 executing program 4: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:13:11 executing program 0: prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) 01:13:11 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/mISDNtimer\x00', 0x4002, 0x0) 01:13:11 executing program 2: timer_create(0x2, 0x0, &(0x7f0000000540)) 01:13:11 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:11 executing program 4: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hopopts_2292={{0x18, 0x29, 0x3b}}], 0x18}, 0x0) 01:13:11 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x0, 0x0) 01:13:11 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 01:13:11 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r0, 0x0, &(0x7f00000003c0)) 01:13:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x800) 01:13:12 executing program 3: fsopen(&(0x7f0000003080)='nfs\x00', 0x0) 01:13:12 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0)='ethtool\x00') 01:13:12 executing program 4: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 01:13:12 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, 0x0, 0x0) 01:13:12 executing program 3: socketpair(0x1e, 0x0, 0x0, &(0x7f0000002580)) [ 353.705767][T11201] attempt to access beyond end of device [ 353.711947][T11201] loop0: rw=2049, want=66, limit=60 01:13:12 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:12 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 01:13:12 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000058c0), 0x10) 01:13:12 executing program 4: timer_settime(0x0, 0x0, &(0x7f0000001900)={{0x77359400}}, 0x0) 01:13:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @empty, @mcast2, 0x0, 0x0, 0x9}) 01:13:12 executing program 3: getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) 01:13:13 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) getsockname(r0, 0x0, 0x0) 01:13:13 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0xb}, @generic={0x0, 0x0, 0x0, 0x6, 0x3}, @initr0, @alu]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x14, &(0x7f00000000c0)=""/20, 0x41000, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x8}, 0x10}, 0x78) 01:13:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x12, 0x2, 0x0, 0x6, 0x4}, 0x40) 01:13:13 executing program 3: recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 01:13:13 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3045e}, 0x78) 01:13:13 executing program 1: fsopen(&(0x7f0000000700)='bfs\x00', 0x1) 01:13:13 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)) 01:13:13 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:13:13 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000003000)='/dev/full\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, 0x0) 01:13:13 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, &(0x7f00000001c0)=[{0x10}], 0x10}, 0x0) 01:13:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 01:13:13 executing program 1: request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='%)\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000540)='batadv\x00') 01:13:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) 01:13:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 01:13:14 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{}, [@map, @generic, @initr0, @initr0, @alu]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x14, &(0x7f00000000c0)=""/20, 0x41000, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x4, 0x6, 0x8}, 0x10}, 0x78) 01:13:14 executing program 0: add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, &(0x7f00000002c0)="f0", 0x1, 0xffffffffffffffff) 01:13:14 executing program 3: syz_80211_join_ibss(&(0x7f00000004c0)='wlan0\x00', &(0x7f0000000500)=@random="ee", 0x1, 0x1) 01:13:14 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, 0x0, 0x0) 01:13:14 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)) 01:13:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 01:13:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x28}}, 0x0) 01:13:14 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000003a00)) 01:13:14 executing program 3: syz_80211_join_ibss(&(0x7f00000004c0)='wlan0\x00', &(0x7f0000000500)=@random="ee", 0x1, 0x1) 01:13:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:13:14 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000005a00)={0x0, @multicast1, 0x0, 0x0, 'fo\x00'}, 0x2c) 01:13:14 executing program 0: syz_init_net_socket$ax25(0x3, 0x5, 0xce) 01:13:14 executing program 1: getresuid(&(0x7f0000000100), 0x0, 0x0) 01:13:14 executing program 3: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) 01:13:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) [ 356.446780][T11325] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 01:13:15 executing program 1: pipe2(0x0, 0x8c000) 01:13:15 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)) 01:13:15 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/136) 01:13:15 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000000)=@framed={{}, [@map, @generic, @initr0, @initr0, @alu]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:15 executing program 3: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x40) 01:13:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) 01:13:15 executing program 1: syz_genetlink_get_family_id$gtp(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 01:13:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) 01:13:15 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000002580)) 01:13:15 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x200000, 0x0) 01:13:15 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000006640)='/dev/full\x00', 0x4822, 0x0) 01:13:15 executing program 3: pkey_mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) 01:13:16 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:16 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) 01:13:16 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000003500)='/dev/vcsu\x00', 0x0, 0x0) 01:13:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001c80)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={&(0x7f00000014c0)={0x14}, 0x14}}, 0x0) 01:13:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:13:16 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000005540)='/dev/full\x00', 0x0, 0x0) 01:13:16 executing program 4: write$char_raw(0xffffffffffffffff, &(0x7f0000000400)={"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"}, 0x200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000140)='S', 0xfe03, 0x600}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="696f636861727365743d63703933362c00ab43d418f1a8dfb60d4b70b091b118a2149462c570f98c729bf1a874dfa36d077a431f399f4d08aee6502bea8728e1fcf96bf49cc775fb21684b429bbbdaef69a1fe800d66a3f61346e0a7f50a1c4bd255c2131de13c9064194da132734ca7243b5eb0ea4382a874e3ce724c0bc8c3e83599f8"]) 01:13:16 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40, 0x0) 01:13:16 executing program 2: request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) 01:13:16 executing program 0: add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 01:13:16 executing program 1: sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 01:13:16 executing program 3: request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='%)\x00', 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0x0) 01:13:16 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x1, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:17 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) 01:13:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@local, {@in=@empty, @in6=@mcast2}, {{@in=@multicast2, @in6=@remote}}}}, 0x128}}, 0x0) 01:13:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@mcast1, @empty, @mcast2}) 01:13:17 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x4, 0xffffffffffffffff, 0x0) 01:13:17 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001500)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[], 0x12a8}, 0x0) 01:13:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 01:13:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000640)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) 01:13:17 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000001100)='nl80211\x00') bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 01:13:17 executing program 0: timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}, 0x0) 01:13:17 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, 0xdbae2ae}) 01:13:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x428, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x40) 01:13:18 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, 0x0) 01:13:18 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x3, 0x0, &(0x7f0000000080)={0x0, 0x0}) 01:13:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:18 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:18 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:18 executing program 4 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 359.960177][T11474] FAULT_INJECTION: forcing a failure. [ 359.960177][T11474] name failslab, interval 1, probability 0, space 0, times 1 [ 359.970662][T11478] FAULT_INJECTION: forcing a failure. [ 359.970662][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 359.994891][T11476] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 360.011302][T11477] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (60729!=0) [ 360.029007][T11474] CPU: 0 PID: 11474 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 360.038907][T11474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.050135][T11474] Call Trace: [ 360.053555][T11474] dump_stack+0x198/0x1fb [ 360.057916][T11474] should_fail.cold+0x5/0xa [ 360.062566][T11474] ? __do_sys_memfd_create+0xf6/0x440 [ 360.067967][T11474] ? __do_sys_memfd_create+0xf6/0x440 [ 360.073424][T11474] should_failslab+0x5/0x10 [ 360.077964][T11474] __kmalloc+0x34a/0x4d0 [ 360.082280][T11474] ? strnlen_user+0x1dd/0x2a0 [ 360.086975][T11474] __do_sys_memfd_create+0xf6/0x440 [ 360.092224][T11474] ? ksys_write+0x1a5/0x250 [ 360.096741][T11474] ? memfd_file_seals_ptr+0x150/0x150 [ 360.102150][T11474] ? check_preemption_disabled+0x50/0x130 [ 360.107873][T11474] ? syscall_enter_from_user_mode+0x1d/0x60 [ 360.113777][T11474] do_syscall_64+0x2d/0x70 [ 360.118244][T11474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 360.124139][T11474] RIP: 0033:0x45de29 [ 360.128047][T11474] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.147680][T11474] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 360.156101][T11474] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 360.164074][T11474] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 360.172045][T11474] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 360.180014][T11474] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 360.187982][T11474] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 [ 360.195980][T11478] CPU: 1 PID: 11478 Comm: syz-executor.4 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 360.205870][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.215928][T11478] Call Trace: [ 360.219232][T11478] dump_stack+0x198/0x1fb [ 360.223583][T11478] should_fail.cold+0x5/0xa [ 360.228182][T11478] _copy_from_user+0x2c/0x180 [ 360.232954][T11478] __copy_msghdr_from_user+0x91/0x4b0 [ 360.238338][T11478] ? __ia32_sys_shutdown+0x70/0x70 [ 360.243525][T11478] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 360.249533][T11478] ? __lock_acquire+0xbb9/0x56d0 [ 360.255295][T11478] sendmsg_copy_msghdr+0xa1/0x160 01:13:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001c80)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c40)={0x0}}, 0x0) [ 360.260327][T11478] ? do_recvmmsg+0x700/0x700 [ 360.265629][T11478] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 360.271623][T11478] ? _parse_integer+0x132/0x180 [ 360.276499][T11478] ___sys_sendmsg+0xc6/0x170 [ 360.281099][T11478] ? sendmsg_copy_msghdr+0x160/0x160 [ 360.286403][T11478] ? lock_downgrade+0x830/0x830 [ 360.291264][T11478] ? lock_is_held_type+0xbb/0xf0 [ 360.296211][T11478] ? find_held_lock+0x2d/0x110 [ 360.301003][T11478] ? ksys_write+0x212/0x250 [ 360.305597][T11478] ? __fget_files+0x294/0x400 [ 360.310317][T11478] ? __fget_light+0xea/0x280 [ 360.314926][T11478] __sys_sendmsg+0xe5/0x1b0 [ 360.318645][T11477] EXT4-fs error (device loop2): ext4_fill_super:4720: inode #2: comm syz-executor.2: iget: root inode unallocated [ 360.319431][T11478] ? __sys_sendmsg_sock+0xb0/0xb0 [ 360.319455][T11478] ? fput_many+0x2f/0x1a0 [ 360.319471][T11478] ? ksys_write+0x1a5/0x250 [ 360.319496][T11478] ? lock_is_held_type+0xbb/0xf0 [ 360.319515][T11478] ? check_preemption_disabled+0x50/0x130 [ 360.319531][T11478] ? syscall_enter_from_user_mode+0x1d/0x60 [ 360.319552][T11478] do_syscall_64+0x2d/0x70 [ 360.346107][T11476] EXT4-fs error (device loop3): ext4_fill_super:4720: inode #2: comm syz-executor.3: iget: root inode unallocated [ 360.351263][T11478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 360.351278][T11478] RIP: 0033:0x45de29 [ 360.351296][T11478] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.351306][T11478] RSP: 002b:00007f1cfe842c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.351326][T11478] RAX: ffffffffffffffda RBX: 000000000002a900 RCX: 000000000045de29 [ 360.351336][T11478] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 360.351345][T11478] RBP: 00007f1cfe842ca0 R08: 0000000000000000 R09: 0000000000000000 [ 360.351354][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.351364][T11478] R13: 00007ffe468360cf R14: 00007f1cfe8439c0 R15: 000000000118bf2c 01:13:19 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 360.460815][T11477] EXT4-fs (loop2): get root inode failed [ 360.466546][T11476] EXT4-fs (loop3): get root inode failed [ 360.466557][T11476] EXT4-fs (loop3): mount failed [ 360.501859][T11477] EXT4-fs (loop2): mount failed 01:13:19 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 01:13:19 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) 01:13:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) [ 360.681763][T11497] FAULT_INJECTION: forcing a failure. [ 360.681763][T11497] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 360.743091][T11497] CPU: 0 PID: 11497 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 360.753036][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.763105][T11497] Call Trace: [ 360.766436][T11497] dump_stack+0x198/0x1fb [ 360.770790][T11497] should_fail.cold+0x5/0xa [ 360.775308][T11497] _copy_from_user+0x2c/0x180 [ 360.780010][T11497] __do_sys_memfd_create+0x168/0x440 [ 360.785312][T11497] ? memfd_file_seals_ptr+0x150/0x150 [ 360.790696][T11497] ? check_preemption_disabled+0x50/0x130 [ 360.796545][T11497] ? syscall_enter_from_user_mode+0x1d/0x60 [ 360.802458][T11497] do_syscall_64+0x2d/0x70 [ 360.806977][T11497] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 360.812893][T11497] RIP: 0033:0x45de29 [ 360.816820][T11497] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.836442][T11497] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 360.844877][T11497] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 360.852858][T11497] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 360.860835][T11497] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 360.869770][T11497] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 360.877754][T11497] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:19 executing program 0: ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000005880)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 01:13:19 executing program 2: perf_event_open$cgroup(&(0x7f00000056c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:19 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:19 executing program 3: timer_create(0x2, &(0x7f0000000500)={0x0, 0x5, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)) 01:13:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:19 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:19 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x2243, 0x0) readahead(r0, 0x0, 0x0) 01:13:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880)='l2tp\x00') 01:13:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) [ 361.257877][T11521] FAULT_INJECTION: forcing a failure. [ 361.257877][T11521] name failslab, interval 1, probability 0, space 0, times 0 [ 361.325017][T11521] CPU: 0 PID: 11521 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 361.334936][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.345014][T11521] Call Trace: [ 361.348322][T11521] dump_stack+0x198/0x1fb [ 361.352673][T11521] should_fail.cold+0x5/0xa [ 361.357198][T11521] should_failslab+0x5/0x10 [ 361.361714][T11521] kmem_cache_alloc+0x3c5/0x550 [ 361.366588][T11521] ? __alloc_fd+0x28d/0x600 [ 361.371117][T11521] ? shmem_destroy_inode+0x70/0x70 [ 361.376241][T11521] shmem_alloc_inode+0x18/0x40 [ 361.381275][T11521] ? shmem_destroy_inode+0x70/0x70 [ 361.386410][T11521] alloc_inode+0x61/0x230 [ 361.390757][T11521] new_inode+0x27/0x2f0 [ 361.394934][T11521] shmem_get_inode+0x195/0xc10 [ 361.399730][T11521] __shmem_file_setup+0xb8/0x310 [ 361.404709][T11521] __do_sys_memfd_create+0x269/0x440 [ 361.410019][T11521] ? memfd_file_seals_ptr+0x150/0x150 [ 361.415439][T11521] ? check_preemption_disabled+0x50/0x130 [ 361.421181][T11521] ? syscall_enter_from_user_mode+0x1d/0x60 [ 361.427096][T11521] do_syscall_64+0x2d/0x70 [ 361.431529][T11521] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 361.437430][T11521] RIP: 0033:0x45de29 [ 361.441336][T11521] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.460954][T11521] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 01:13:20 executing program 0: pipe2(&(0x7f0000001640)={0xffffffffffffffff}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, 0x0) 01:13:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x2, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 361.469395][T11521] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 361.477374][T11521] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 361.485362][T11521] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 361.493350][T11521] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 361.501331][T11521] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:20 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:20 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') [ 361.713753][T11540] FAULT_INJECTION: forcing a failure. [ 361.713753][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 361.773735][T11540] CPU: 0 PID: 11540 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 361.783809][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.794492][T11540] Call Trace: [ 361.797803][T11540] dump_stack+0x198/0x1fb [ 361.802152][T11540] should_fail.cold+0x5/0xa [ 361.806673][T11540] should_failslab+0x5/0x10 [ 361.811201][T11540] kmem_cache_alloc+0x3c5/0x550 [ 361.816068][T11540] ? lock_is_held_type+0xbb/0xf0 [ 361.821155][T11540] security_inode_alloc+0x34/0x160 [ 361.826291][T11540] inode_init_always+0x5a9/0xdb0 [ 361.831251][T11540] alloc_inode+0x82/0x230 [ 361.835600][T11540] new_inode+0x27/0x2f0 [ 361.839773][T11540] shmem_get_inode+0x195/0xc10 [ 361.844561][T11540] __shmem_file_setup+0xb8/0x310 [ 361.849524][T11540] __do_sys_memfd_create+0x269/0x440 [ 361.854830][T11540] ? memfd_file_seals_ptr+0x150/0x150 [ 361.860221][T11540] ? check_preemption_disabled+0x50/0x130 [ 361.865963][T11540] ? syscall_enter_from_user_mode+0x1d/0x60 [ 361.871882][T11540] do_syscall_64+0x2d/0x70 [ 361.876313][T11540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 361.882212][T11540] RIP: 0033:0x45de29 [ 361.886121][T11540] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.905742][T11540] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 361.914170][T11540] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 361.922147][T11540] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 361.930129][T11540] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 361.938102][T11540] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 361.946080][T11540] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:20 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:20 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 01:13:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:20 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) 01:13:20 executing program 3: request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0) 01:13:20 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 362.154032][T11558] FAULT_INJECTION: forcing a failure. [ 362.154032][T11558] name failslab, interval 1, probability 0, space 0, times 0 [ 362.176382][T11558] CPU: 0 PID: 11558 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 362.186437][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.196505][T11558] Call Trace: [ 362.199813][T11558] dump_stack+0x198/0x1fb [ 362.204164][T11558] should_fail.cold+0x5/0xa [ 362.208689][T11558] should_failslab+0x5/0x10 [ 362.213201][T11558] kmem_cache_alloc+0x3c5/0x550 [ 362.218164][T11558] ? lockdep_hardirqs_on+0x53/0x100 [ 362.223413][T11558] __d_alloc+0x2a/0x950 [ 362.227596][T11558] d_alloc_pseudo+0x19/0x70 [ 362.232136][T11558] alloc_file_pseudo+0xc6/0x250 [ 362.237094][T11558] ? alloc_file+0x5a0/0x5a0 [ 362.241646][T11558] ? shmem_get_inode+0x593/0xc10 [ 362.246633][T11558] __shmem_file_setup+0x144/0x310 [ 362.251703][T11558] __do_sys_memfd_create+0x269/0x440 [ 362.257266][T11558] ? memfd_file_seals_ptr+0x150/0x150 [ 362.262660][T11558] ? check_preemption_disabled+0x50/0x130 [ 362.268415][T11558] ? syscall_enter_from_user_mode+0x1d/0x60 [ 362.274332][T11558] do_syscall_64+0x2d/0x70 [ 362.278764][T11558] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 362.284662][T11558] RIP: 0033:0x45de29 [ 362.288591][T11558] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.308210][T11558] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 362.316644][T11558] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 362.324622][T11558] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 362.333588][T11558] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 362.341591][T11558] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 01:13:20 executing program 0: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:13:20 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003a00)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 01:13:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 362.349571][T11558] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:21 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 01:13:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:21 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 362.651767][T11575] FAULT_INJECTION: forcing a failure. [ 362.651767][T11575] name failslab, interval 1, probability 0, space 0, times 0 [ 362.697433][T11575] CPU: 1 PID: 11575 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 362.707366][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.717462][T11575] Call Trace: [ 362.720775][T11575] dump_stack+0x198/0x1fb [ 362.725136][T11575] should_fail.cold+0x5/0xa [ 362.729667][T11575] should_failslab+0x5/0x10 [ 362.734180][T11575] kmem_cache_alloc+0x3c5/0x550 [ 362.739050][T11575] __alloc_file+0x21/0x350 [ 362.743477][T11575] alloc_empty_file+0x6d/0x170 [ 362.748254][T11575] alloc_file+0x5e/0x5a0 [ 362.752520][T11575] alloc_file_pseudo+0x165/0x250 [ 362.757475][T11575] ? alloc_file+0x5a0/0x5a0 [ 362.762036][T11575] ? shmem_get_inode+0x593/0xc10 [ 362.766982][T11575] __shmem_file_setup+0x144/0x310 [ 362.772070][T11575] __do_sys_memfd_create+0x269/0x440 [ 362.777373][T11575] ? memfd_file_seals_ptr+0x150/0x150 [ 362.782747][T11575] ? check_preemption_disabled+0x50/0x130 [ 362.788493][T11575] ? syscall_enter_from_user_mode+0x1d/0x60 [ 362.794406][T11575] do_syscall_64+0x2d/0x70 [ 362.798849][T11575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 362.804767][T11575] RIP: 0033:0x45de29 [ 362.808660][T11575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.828280][T11575] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 362.836717][T11575] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 362.844725][T11575] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 362.852711][T11575] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 362.860716][T11575] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 362.868700][T11575] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:21 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:21 executing program 0: unshare(0x22000300) 01:13:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000001080)='/dev/kvm\x00', 0x4000, 0x0) 01:13:21 executing program 3: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 01:13:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:21 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 363.047126][T11587] FAULT_INJECTION: forcing a failure. [ 363.047126][T11587] name failslab, interval 1, probability 0, space 0, times 0 01:13:21 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x4000) 01:13:21 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 01:13:21 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)) [ 363.133155][T11587] CPU: 1 PID: 11587 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 363.143091][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.153188][T11587] Call Trace: [ 363.156500][T11587] dump_stack+0x198/0x1fb [ 363.160858][T11587] should_fail.cold+0x5/0xa [ 363.165382][T11587] should_failslab+0x5/0x10 [ 363.169914][T11587] kmem_cache_alloc+0x3c5/0x550 [ 363.174785][T11587] security_file_alloc+0x34/0x170 [ 363.179828][T11587] __alloc_file+0xd8/0x350 [ 363.184260][T11587] alloc_empty_file+0x6d/0x170 [ 363.189043][T11587] alloc_file+0x5e/0x5a0 [ 363.193303][T11587] alloc_file_pseudo+0x165/0x250 [ 363.198252][T11587] ? alloc_file+0x5a0/0x5a0 [ 363.202769][T11587] ? shmem_get_inode+0x593/0xc10 [ 363.207759][T11587] __shmem_file_setup+0x144/0x310 [ 363.212809][T11587] __do_sys_memfd_create+0x269/0x440 [ 363.218098][T11587] ? memfd_file_seals_ptr+0x150/0x150 [ 363.223487][T11587] ? check_preemption_disabled+0x50/0x130 [ 363.229244][T11587] ? syscall_enter_from_user_mode+0x1d/0x60 [ 363.235167][T11587] do_syscall_64+0x2d/0x70 [ 363.239848][T11587] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 363.245763][T11587] RIP: 0033:0x45de29 [ 363.249705][T11587] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.269498][T11587] RSP: 002b:00007f4721657a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 01:13:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 363.277954][T11587] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045de29 [ 363.285955][T11587] RDX: 0000000020000248 RSI: 0000000000000000 RDI: 00000000004c2883 [ 363.293936][T11587] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 363.302516][T11587] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000003 [ 363.310518][T11587] R13: 0000000020000100 R14: 0000000020000200 R15: 00000000200000c0 01:13:22 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x220282, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 01:13:22 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/null\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 01:13:22 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x12a8}, 0x0) 01:13:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x8, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:22 executing program 1 (fault-call:0 fault-nth:7): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:22 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000001000)='/dev/null\x00', 0x0, 0x0) 01:13:22 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000039c0)={0x0}, 0x10) [ 363.996958][T11617] FAULT_INJECTION: forcing a failure. [ 363.996958][T11617] name failslab, interval 1, probability 0, space 0, times 0 01:13:22 executing program 2: r0 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00', &(0x7f0000000140)=':', 0x1) [ 364.069526][T11617] CPU: 0 PID: 11617 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 364.079445][T11617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.089504][T11617] Call Trace: [ 364.092805][T11617] dump_stack+0x198/0x1fb [ 364.097158][T11617] should_fail.cold+0x5/0xa [ 364.101787][T11617] ? tomoyo_realpath_from_path+0xc3/0x620 [ 364.107526][T11617] ? tomoyo_realpath_from_path+0xc3/0x620 [ 364.113260][T11617] should_failslab+0x5/0x10 [ 364.117771][T11617] __kmalloc+0x34a/0x4d0 [ 364.122114][T11617] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 364.127685][T11617] tomoyo_realpath_from_path+0xc3/0x620 [ 364.133248][T11617] ? tomoyo_profile+0x42/0x50 [ 364.137945][T11617] tomoyo_path_perm+0x21b/0x400 [ 364.142803][T11617] ? tomoyo_path_perm+0x1c1/0x400 [ 364.147849][T11617] ? tomoyo_check_open_permission+0x380/0x380 [ 364.153989][T11617] ? lock_is_held_type+0xbb/0xf0 [ 364.158958][T11617] ? lock_is_held_type+0xbb/0xf0 [ 364.163925][T11617] security_path_truncate+0xcf/0x140 [ 364.169228][T11617] do_sys_ftruncate+0x3f7/0x570 [ 364.174103][T11617] do_syscall_64+0x2d/0x70 [ 364.178534][T11617] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 364.184439][T11617] RIP: 0033:0x45ddf7 [ 364.188345][T11617] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.208073][T11617] RSP: 002b:00007f4721657a28 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 364.216499][T11617] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045ddf7 [ 364.224476][T11617] RDX: 0000000020000248 RSI: 0000000000080004 RDI: 0000000000000004 [ 364.232456][T11617] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 364.240432][T11617] R10: fe03f80fe03f80ff R11: 0000000000000217 R12: 0000000000000003 [ 364.248409][T11617] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000c0 01:13:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:22 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 01:13:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0}, 0x78) 01:13:22 executing program 3: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) [ 364.276909][T11617] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.288752][T11617] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 364.305230][T11617] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 364.365671][T11617] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xe, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 364.464517][T11617] EXT4-fs (loop1): get root inode failed [ 364.507555][T11617] EXT4-fs (loop1): mount failed 01:13:23 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:23 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) fstat(r0, &(0x7f00000003c0)) 01:13:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) dup3(r0, r1, 0x0) 01:13:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:23 executing program 2: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 01:13:23 executing program 1 (fault-call:0 fault-nth:8): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 364.971785][T11656] FAULT_INJECTION: forcing a failure. [ 364.971785][T11656] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 364.985027][T11656] CPU: 1 PID: 11656 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 364.994918][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.004977][T11656] Call Trace: [ 365.008266][T11656] dump_stack+0x198/0x1fb [ 365.012616][T11656] should_fail.cold+0x5/0xa [ 365.017160][T11656] __alloc_pages_nodemask+0x189/0x730 [ 365.022548][T11656] ? __alloc_pages_slowpath.constprop.0+0x27e0/0x27e0 [ 365.029389][T11656] cache_grow_begin+0x71/0x4a0 [ 365.034170][T11656] cache_alloc_refill+0x27f/0x380 [ 365.039224][T11656] ? tomoyo_realpath_from_path+0xc3/0x620 [ 365.045493][T11656] ? tomoyo_realpath_from_path+0xc3/0x620 [ 365.051583][T11656] __kmalloc+0x3e3/0x4d0 [ 365.055840][T11656] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 365.061402][T11656] tomoyo_realpath_from_path+0xc3/0x620 [ 365.066957][T11656] ? tomoyo_profile+0x42/0x50 [ 365.071646][T11656] tomoyo_path_perm+0x21b/0x400 [ 365.076517][T11656] ? tomoyo_path_perm+0x1c1/0x400 [ 365.081569][T11656] ? tomoyo_check_open_permission+0x380/0x380 [ 365.087694][T11656] ? lock_is_held_type+0xbb/0xf0 [ 365.092658][T11656] ? lock_is_held_type+0xbb/0xf0 [ 365.097614][T11656] security_path_truncate+0xcf/0x140 [ 365.102908][T11656] do_sys_ftruncate+0x3f7/0x570 [ 365.107779][T11656] do_syscall_64+0x2d/0x70 [ 365.112207][T11656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 365.118135][T11656] RIP: 0033:0x45ddf7 [ 365.122034][T11656] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.141752][T11656] RSP: 002b:00007f4721657a28 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 365.150183][T11656] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045ddf7 [ 365.158158][T11656] RDX: 0000000020000248 RSI: 0000000000080004 RDI: 0000000000000004 01:13:23 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) 01:13:23 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) 01:13:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000001500)='net/mcfilter\x00') r1 = socket$inet6(0xa, 0x803, 0x9) r2 = fcntl$dupfd(r1, 0x0, r0) read$FUSE(r2, 0x0, 0x0) 01:13:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x60, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 365.167100][T11656] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 365.175064][T11656] R10: fe03f80fe03f80ff R11: 0000000000000217 R12: 0000000000000003 [ 365.183029][T11656] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000c0 01:13:23 executing program 0: accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) socketpair(0x5, 0x0, 0x0, &(0x7f0000000240)) 01:13:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 365.503373][T11656] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 365.514459][T11656] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 365.535060][T11656] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 365.560223][T11656] EXT4-fs (loop1): get root inode failed [ 365.566358][T11656] EXT4-fs (loop1): mount failed 01:13:24 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:24 executing program 2: sync() setuid(0xee01) r0 = semget$private(0x0, 0x7, 0x0) semop(r0, &(0x7f0000000180)=[{}], 0x1) 01:13:24 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x300000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) 01:13:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000004c0)={{0x0, @rand_addr=0x64010100, 0x0, 0x0, 'lblcr\x00'}, {@dev}}, 0x44) 01:13:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x15f, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:24 executing program 1 (fault-call:0 fault-nth:9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 365.882221][T11693] FAULT_INJECTION: forcing a failure. [ 365.882221][T11693] name failslab, interval 1, probability 0, space 0, times 0 [ 365.906281][T11697] IPVS: set_ctl: invalid protocol: 0 100.1.1.0:0 [ 365.980299][T11693] CPU: 1 PID: 11693 Comm: syz-executor.1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 365.990218][T11693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.000280][T11693] Call Trace: [ 366.003595][T11693] dump_stack+0x198/0x1fb [ 366.007951][T11693] should_fail.cold+0x5/0xa [ 366.012476][T11693] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 366.017870][T11693] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 366.023259][T11693] should_failslab+0x5/0x10 01:13:24 executing program 2: select(0x40, &(0x7f0000000140), 0x0, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0x2710}) [ 366.027772][T11693] __kmalloc+0x34a/0x4d0 [ 366.032030][T11693] ? lock_is_held_type+0xbb/0xf0 [ 366.037001][T11693] tomoyo_encode2.part.0+0xe9/0x3a0 [ 366.042222][T11693] tomoyo_encode+0x28/0x50 [ 366.046652][T11693] tomoyo_realpath_from_path+0x186/0x620 [ 366.052302][T11693] ? tomoyo_profile+0x42/0x50 [ 366.057035][T11693] tomoyo_path_perm+0x21b/0x400 [ 366.061901][T11693] ? tomoyo_path_perm+0x1c1/0x400 [ 366.066966][T11693] ? tomoyo_check_open_permission+0x380/0x380 [ 366.073123][T11693] ? lock_is_held_type+0xbb/0xf0 [ 366.078102][T11693] ? lock_is_held_type+0xbb/0xf0 [ 366.083070][T11693] security_path_truncate+0xcf/0x140 [ 366.088391][T11693] do_sys_ftruncate+0x3f7/0x570 [ 366.093262][T11693] do_syscall_64+0x2d/0x70 [ 366.097696][T11693] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 366.103596][T11693] RIP: 0033:0x45ddf7 [ 366.107511][T11693] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.128114][T11693] RSP: 002b:00007f4721657a28 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 366.136553][T11693] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045ddf7 [ 366.144562][T11693] RDX: 0000000020000248 RSI: 0000000000080004 RDI: 0000000000000004 [ 366.152550][T11693] RBP: 0000000000080004 R08: 0000000020000248 R09: 0000000000000000 [ 366.160536][T11693] R10: fe03f80fe03f80ff R11: 0000000000000217 R12: 0000000000000003 [ 366.168519][T11693] R13: 0000000000000004 R14: 0000000000000004 R15: 00000000200000c0 01:13:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x300, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:24 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f00000005c0)='batadv\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup/syz1\x00', 0x200002, 0x0) 01:13:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x19, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/1208], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0x248800) 01:13:24 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000a00)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) 01:13:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x500, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 366.519142][T11693] ERROR: Out of memory at tomoyo_realpath_from_path. [ 366.569290][T11693] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 366.588509][T11693] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 366.602788][T11693] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 366.620812][T11693] EXT4-fs (loop1): get root inode failed [ 366.642836][T11693] EXT4-fs (loop1): mount failed 01:13:25 executing program 0: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x2710}) 01:13:25 executing program 3: shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/141) 01:13:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x600, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:25 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) 01:13:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80004, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000180)={0xa1, 0x0, 0x0, 0x300}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:13:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:25 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x8) 01:13:25 executing program 0: pipe(&(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFRASET(r0, 0x1264, 0x0) [ 366.923929][T11741] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 366.987443][T11741] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 367.008835][T11749] usb usb2: usbfs: process 11749 (syz-executor.3) did not claim interface 0 before use [ 367.022969][T11741] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:25 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000240)) eventfd(0x0) pipe(&(0x7f00000012c0)={0xffffffffffffffff}) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001400)='team\x00') socket$inet(0x2, 0x1, 0x8) 01:13:25 executing program 0: pipe(&(0x7f00000012c0)) 01:13:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x900, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 367.057951][T11741] EXT4-fs (loop1): get root inode failed [ 367.078737][T11741] EXT4-fs (loop1): mount failed 01:13:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:25 executing program 0: socket$inet6(0x18, 0x0, 0x80) [ 367.296621][T11770] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 367.339296][T11770] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 367.354870][T11770] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 367.432846][T11770] EXT4-fs (loop1): get root inode failed [ 367.442623][T11770] EXT4-fs (loop1): mount failed [ 367.540558][T11770] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 367.552114][T11770] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 367.581925][T11770] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 367.595031][T11770] EXT4-fs (loop1): get root inode failed [ 367.601401][T11770] EXT4-fs (loop1): mount failed 01:13:26 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xe00, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:26 executing program 0: rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 01:13:26 executing program 3: semctl$SETVAL(0x0, 0x0, 0x8, &(0x7f0000000080)) 01:13:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80003, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 367.839453][T11792] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:26 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) 01:13:26 executing program 3: pipe(&(0x7f0000001ac0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r0, 0x0, 0x0) 01:13:26 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8) 01:13:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 367.882508][T11792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 367.906453][T11792] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 367.919719][T11792] EXT4-fs (loop1): get root inode failed [ 367.925481][T11792] EXT4-fs (loop1): mount failed 01:13:26 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x10) 01:13:26 executing program 0: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 368.039664][T11792] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:26 executing program 3: syz_mount_image$nfs4(0x0, &(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 368.093547][T11792] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 368.147016][T11792] EXT4-fs: failed to create workqueue [ 368.162389][T11792] EXT4-fs (loop1): mount failed 01:13:27 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x3f00, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:27 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff6eec, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:13:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000013c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NODE={0xe6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "edc52f94000bd23e1f54f483b35ecb18d0ef4a939f1c2e62c6"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "9c9f6c29f3f766dc65003ddd5d5f18e16a5c5d46f531eeff0bb069c1d2"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "be62ba950724a398921e7995fdabbaf655a7f04b7a1deab692"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "fef2d94af1fd1e7f88b9c27a04d60104b75d2a15f62a9d92d73156101df037e7bd"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1b6c3b42584cca18acc69f8d29132238078f18d3"}}, @TIPC_NLA_NODE_ID={0xd05, 0x3, "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"}]}]}, 0xec4}}, 0x0) 01:13:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80005, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:27 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@private1, @mcast1, [], [], 'bridge_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) [ 368.753136][T11833] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:27 executing program 2: socketpair(0x2, 0x3, 0x8, 0x0) 01:13:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 01:13:27 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) 01:13:27 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x0, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) [ 368.845606][T11833] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x5f01, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 368.932840][T11833] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x609}, 0x14}}, 0x0) [ 369.028402][T11833] EXT4-fs (loop1): get root inode failed [ 369.034104][T11833] EXT4-fs (loop1): mount failed [ 369.121741][T11833] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.188919][T11833] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 369.231072][T11833] EXT4-fs: failed to create workqueue [ 369.236668][T11833] EXT4-fs (loop1): mount failed 01:13:28 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:28 executing program 3: timer_create(0xe22b4526c0aae697, 0x0, &(0x7f00000000c0)) 01:13:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x6000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:28 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 01:13:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/net/tun\x00', 0x80a02, 0x0) write$cgroup_pid(r0, 0x0, 0xf0ffffff7f0000) 01:13:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80006, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 369.795154][T11879] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0x40) 01:13:28 executing program 0: perf_event_open$cgroup(&(0x7f0000000500)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 01:13:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00'}) [ 369.939370][T11879] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 369.989227][T11879] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:28 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 370.073299][T11879] EXT4-fs (loop1): get root inode failed 01:13:28 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x10, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x48], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 370.137797][T11879] EXT4-fs (loop1): mount failed 01:13:28 executing program 0: select(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, 0x2710}) 01:13:28 executing program 3: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) request_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='%)\x00', 0xffffffffffffffff) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x0) 01:13:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x34000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:28 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 370.248636][T11879] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 370.267620][T11879] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x2c}}, 0x0) [ 370.349328][T11879] EXT4-fs: failed to create workqueue [ 370.378083][T11879] EXT4-fs (loop1): mount failed 01:13:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80007, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x400300, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:29 executing program 0: unshare(0x30040200) 01:13:29 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) 01:13:29 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x80) 01:13:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x6d8, 0x148, 0x148, 0xffffffff, 0x0, 0x398, 0x608, 0x608, 0xffffffff, 0x608, 0x608, 0x5, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x0, 0x7}}, @common=@hl={{0x28, 'hl\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'wg0\x00'}}}, {{@ipv6={@mcast1, @remote, [], [], 'veth0_virt_wifi\x00', 'syz_tun\x00'}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x6, [@remote, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @local, @loopback, @empty, @local, @local, @empty, @private1, @private0={0xfc, 0x0, [], 0x1}, @local, @private0]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@remote, @ipv4=@empty, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@private2={0xfc, 0x2, [], 0x1}, @dev, [], [], 'veth0_to_bridge\x00', 'wg0\x00'}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@unspec=@physdev={{0x68, 'physdev\x00'}, {'veth1_virt_wifi\x00', {}, 'geneve0\x00'}}, @common=@icmp6={{0x28, 'icmp6\x00'}, {0x0, "bc0c"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv4=@dev={0xac, 0x14, 0x14, 0x2d}, @icmp_id, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) 01:13:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf0ffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8c0) 01:13:29 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) 01:13:29 executing program 2: sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x0) [ 370.729046][T11932] x_tables: duplicate underflow at hook 1 [ 370.731339][T11931] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x85) 01:13:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local}, 0xc) [ 370.819814][T11931] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 370.879736][T11931] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 370.938448][T11931] EXT4-fs (loop1): get root inode failed [ 370.949743][T11931] EXT4-fs (loop1): mount failed [ 371.015434][T11931] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.035414][T11931] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 371.066755][T11931] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 371.103548][T11931] EXT4-fs (loop1): get root inode failed [ 371.118096][T11931] EXT4-fs (loop1): mount failed 01:13:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80008, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20000000) 01:13:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x10) 01:13:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x1000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:29 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) 01:13:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:13:29 executing program 2: io_setup(0x1, &(0x7f0000000400)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:13:29 executing program 0: openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/mdstat\x00', 0x0, 0x0) 01:13:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x2000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:29 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) 01:13:30 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 371.369281][T11966] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.453273][T11966] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5437) [ 371.558964][T11966] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 371.624604][T11966] EXT4-fs (loop1): get root inode failed [ 371.675513][T11966] EXT4-fs (loop1): mount failed [ 371.725689][T11966] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.725712][T11966] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 371.766338][T11966] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 371.769988][T11966] EXT4-fs (loop1): get root inode failed [ 371.770000][T11966] EXT4-fs (loop1): mount failed 01:13:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000a, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:30 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:13:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, 0x0, 0x0) 01:13:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x3000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:30 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f00000000c0)=@framed={{}, [@alu={0x7, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, @call, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xcf, &(0x7f0000000140)=""/207, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:30 executing program 2: bpf$BPF_BTF_LOAD(0x1e, 0x0, 0x0) 01:13:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0x40) 01:13:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x4000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) 01:13:30 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 01:13:30 executing program 0: r0 = socket(0x22, 0x2, 0x3) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, @private0, @remote}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) [ 372.092341][T12003] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:30 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 372.140092][T12003] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 372.196709][T12003] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 372.267327][T12003] EXT4-fs (loop1): get root inode failed [ 372.304956][T12003] EXT4-fs (loop1): mount failed [ 372.367925][T12003] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 372.367950][T12003] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 372.423224][T12003] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000f, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) 01:13:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x5000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:31 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:31 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001200)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 01:13:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280)={0x10001}, 0x4) [ 372.436957][T12003] EXT4-fs (loop1): get root inode failed [ 372.436971][T12003] EXT4-fs (loop1): mount failed 01:13:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x6000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000400)) 01:13:31 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480)='/dev/adsp1\x00', 0x20001, 0x0) 01:13:31 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x2, &(0x7f00000000c0)=@raw=[@initr0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 01:13:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) [ 372.732029][T12046] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 372.752416][T12046] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x7000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 372.808519][T12046] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 372.841003][T12046] EXT4-fs (loop1): get root inode failed [ 372.891053][T12046] EXT4-fs (loop1): mount failed [ 373.010343][T12046] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 373.030042][T12046] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 373.047297][T12046] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 373.079756][T12046] EXT4-fs (loop1): get root inode failed [ 373.085431][T12046] EXT4-fs (loop1): mount failed 01:13:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x9}, 0x0) sendmmsg$inet6(r0, &(0x7f000001ad80)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) 01:13:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3b, 0x0, "58fc7811472552028175ae3ad2bb3bf39f446a44961563d05ab4417f5f3dde3606fbe83326274e5f1253aed5e90fcceb2eb2b1c379476ed5c08eea5e8bb8dd9d24880f1cf2a8d3e8beb8033e8b50e835"}, 0xd8) 01:13:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xa5}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 01:13:34 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80010, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x8000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x400000000000164, 0x0) recvmmsg(r0, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010042, 0x0) 01:13:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3d8, 0x180, 0x180, 0xffffffff, 0x258, 0x180, 0x340, 0x340, 0xffffffff, 0x340, 0x340, 0x5, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'ip6tnl0\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @multicast1, @port, @gre_key}}}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'syzkaller1\x00', 'ip6gretap0\x00'}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private, @icmp_id, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@private, @icmp_id, @gre_key}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) 01:13:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x0, 0x0) [ 375.626852][T12094] x_tables: duplicate underflow at hook 1 [ 375.665532][T12097] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:34 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x40, {0x2, 0x0, @loopback}, 'vlan0\x00'}) 01:13:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x9000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:34 executing program 2: syz_open_dev$ndb(&(0x7f00000006c0)='/dev/nbd#\x00', 0x0, 0x80ce0) [ 375.707597][T12097] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 375.738658][T12097] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xe000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 375.786569][T12097] EXT4-fs (loop1): get root inode failed [ 375.825224][T12097] EXT4-fs (loop1): mount failed 01:13:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:34 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/uts\x00') [ 375.916611][T12097] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 375.929999][T12097] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 375.946896][T12097] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 375.996973][T12097] EXT4-fs (loop1): get root inode failed [ 376.028792][T12097] EXT4-fs (loop1): mount failed 01:13:37 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:37 executing program 2: socketpair(0x22, 0x2, 0x4, &(0x7f0000000000)) 01:13:37 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, 0x0, 0x0) 01:13:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x3f000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80012, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:37 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x401f0000) 01:13:37 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 378.774532][T12141] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 378.785872][T12141] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:37 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x8101) 01:13:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x5f010000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:37 executing program 2: socketpair(0x22, 0x2, 0x4, &(0x7f0000000000)) [ 378.816277][T12141] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 378.830381][T12141] EXT4-fs (loop1): get root inode failed [ 378.836109][T12141] EXT4-fs (loop1): mount failed [ 378.896414][T12150] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 378.920400][T12141] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:37 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x1, 0x0) [ 378.971936][T12141] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:37 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1c0d82, 0x0) [ 379.046865][T12141] EXT4-fs: failed to create workqueue [ 379.076162][ T21] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 379.084308][T12141] EXT4-fs (loop1): mount failed 01:13:38 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000005c0), 0xe) 01:13:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x60000000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:38 executing program 0: socket(0x32, 0x0, 0x0) 01:13:38 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80014, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x9effffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 379.751986][T12187] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 379.772495][T12189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:38 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x1f40) 01:13:38 executing program 2: socket(0x10, 0x802, 0x3b) [ 379.799269][T12189] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 379.814828][T12189] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 379.843875][T12189] EXT4-fs (loop1): get root inode failed [ 379.850087][T12189] EXT4-fs (loop1): mount failed 01:13:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:38 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={[], [{@dont_hash='dont_hash'}]}) 01:13:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf0ffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 379.913857][T12189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 379.935157][ T196] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 380.008665][T12189] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 380.059634][T12210] tmpfs: Unknown parameter 'dont_hash' [ 380.070778][T12210] tmpfs: Unknown parameter 'dont_hash' [ 380.071319][T12189] EXT4-fs: failed to create workqueue [ 380.120044][T12189] EXT4-fs (loop1): mount failed [ 380.128356][T12215] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 380.251433][ T196] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:39 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:39 executing program 0: utimes(0x0, &(0x7f0000000100)={{}, {0x0, 0x2710}}) 01:13:39 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x8}]}}) 01:13:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xf5ffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8003c, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xfcffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 380.743698][T12230] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 380.753277][T12234] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:39 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:13:39 executing program 0: syz_mount_image$sysv(&(0x7f0000000000)='sysv\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)={[], [{@context={'context', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'system_u'}}]}) [ 380.826621][T12234] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) 01:13:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xfffff000, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 380.892245][T12234] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 380.959494][ T27] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xffffff7f, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 381.022401][T12234] EXT4-fs (loop1): get root inode failed [ 381.034136][T12250] VFS: unable to find oldfs superblock on device loop0 [ 381.070858][T12234] EXT4-fs (loop1): mount failed [ 381.150649][T12250] VFS: unable to find oldfs superblock on device loop0 [ 381.274830][T12234] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 381.296130][T12255] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 381.297483][T12234] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 381.323341][T12234] EXT4-fs: failed to create workqueue [ 381.328913][T12234] EXT4-fs (loop1): mount failed 01:13:40 executing program 5: timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:40 executing program 2: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 01:13:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xffffff9e, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:40 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x6]}, 0x8}) 01:13:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80066, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:40 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) 01:13:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xfffffff0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:40 executing program 2: pkey_alloc(0x0, 0x6) 01:13:40 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp865'}}]}) [ 381.723082][T12280] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xfffffff5, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 381.801544][T12282] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 381.810983][T12280] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 381.825383][T12280] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 381.838421][T12280] EXT4-fs (loop1): get root inode failed [ 381.844183][T12280] EXT4-fs (loop1): mount failed 01:13:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xfffffffc, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$qnx6(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1, &(0x7f0000001380)=[{&(0x7f0000000240)="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", 0xdc1}], 0x0, 0x0) [ 381.889257][T12280] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 381.944663][T12280] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 381.964512][T12280] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 382.016288][T12280] EXT4-fs (loop1): get root inode failed [ 382.065805][T12280] EXT4-fs (loop1): mount failed [ 382.084014][T12300] ISOFS: Unable to identify CD-ROM format. [ 382.362771][T12300] ISOFS: Unable to identify CD-ROM format. 01:13:41 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) 01:13:41 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000040)={@empty, @local, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 01:13:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0xffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8007a, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:41 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@size={'size'}}]}) [ 382.798518][T12327] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 382.809668][T12327] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 382.828588][T12332] tmpfs: Bad value for 'size' [ 382.834929][T12327] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:41 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000200)={0xa}, 0x10, 0x0}}], 0x1, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) [ 382.835328][T12332] tmpfs: Bad value for 'size' [ 382.847587][T12327] EXT4-fs (loop1): get root inode failed [ 382.857549][T12327] EXT4-fs (loop1): mount failed 01:13:41 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 382.938944][T12331] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 382.949048][T12327] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 382.976608][T12327] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0xf, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:41 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:41 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:13:41 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 383.069224][T12327] EXT4-fs: failed to create workqueue [ 383.074663][T12327] EXT4-fs (loop1): mount failed 01:13:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80087, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:41 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0xc0, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:42 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 383.367510][ T5] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 383.405344][T12358] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 383.421161][T12358] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 383.487173][T12358] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 383.532633][T12358] EXT4-fs (loop1): get root inode failed [ 383.541337][T12358] EXT4-fs (loop1): mount failed [ 383.624589][T12379] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 383.636717][T12358] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 383.689847][T12358] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 383.728614][T12358] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 383.753984][T12358] EXT4-fs (loop1): get root inode failed [ 383.765882][T12358] EXT4-fs (loop1): mount failed [ 383.772743][ T5] usb 3-1: not running at top speed; connect to a high speed hub [ 383.858272][ T5] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 383.877281][ T5] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.902960][ T5] usb 3-1: config 1 interface 0 has no altsetting 0 [ 384.081808][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 384.095761][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.111098][ T5] usb 3-1: Product: syz [ 384.120007][ T5] usb 3-1: Manufacturer: syz [ 384.126477][ T5] usb 3-1: SerialNumber: syz [ 384.159916][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 384.462129][ T5] usb 3-1: USB disconnect, device number 4 [ 385.157519][ T2668] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 385.568088][ T2668] usb 3-1: not running at top speed; connect to a high speed hub [ 385.648283][ T2668] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 385.659146][ T2668] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.673471][ T2668] usb 3-1: config 1 interface 0 has no altsetting 0 [ 385.837516][ T2668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 385.847735][ T2668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.855780][ T2668] usb 3-1: Product: syz [ 385.862003][ T2668] usb 3-1: Manufacturer: syz [ 385.866665][ T2668] usb 3-1: SerialNumber: syz [ 385.889871][T12404] raw-gadget gadget: fail, usb_ep_enable returned -22 01:13:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00'}) 01:13:44 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:13:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0xec0, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80102, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 386.051967][ T2668] usb 3-1: USB disconnect, device number 5 [ 386.111560][T12422] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 386.130909][T12421] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:44 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:13:44 executing program 2: syz_emit_ethernet(0x354, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa81"], 0x0) 01:13:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x33fe0, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 386.159214][T12422] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 386.212067][T12422] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 386.245956][T12422] EXT4-fs (loop1): get root inode failed 01:13:44 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 386.305363][T12422] EXT4-fs (loop1): mount failed 01:13:44 executing program 2: syz_emit_ethernet(0x354, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa8100050008"], 0x0) 01:13:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20000320, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 386.437809][T12422] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 386.449117][T12422] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 386.473266][T12422] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:45 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:45 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:13:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x7ffff000, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 386.539212][T12422] EXT4-fs (loop1): get root inode failed [ 386.567473][T12422] EXT4-fs (loop1): mount failed 01:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80103, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:45 executing program 2: syz_emit_ethernet(0x354, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa810005"], 0x0) 01:13:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0xfffffdef, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:45 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 386.818705][T12470] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 386.897523][T12470] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 386.967700][T12470] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 386.988414][T12470] EXT4-fs (loop1): get root inode failed [ 386.994072][T12470] EXT4-fs (loop1): mount failed [ 387.069065][T12470] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 387.081347][T12470] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 387.109391][T12470] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 387.133780][T12470] EXT4-fs (loop1): get root inode failed [ 387.145302][T12470] EXT4-fs (loop1): mount failed 01:13:47 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:47 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 01:13:47 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:47 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) tkill(r0, 0x40) 01:13:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80104, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) tkill(r0, 0x40) [ 389.446540][T12501] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 389.481075][T12503] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:13:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x3, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, 0x2c}}, 0x0) [ 389.493474][T12503] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 389.515747][T12503] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) tkill(r0, 0x40) [ 389.578034][T12503] EXT4-fs (loop1): get root inode failed [ 389.634047][T12503] EXT4-fs (loop1): mount failed 01:13:48 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:48 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) [ 389.697990][ T275] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 389.745261][T12503] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 389.797537][T12503] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 389.813151][T12503] EXT4-fs: failed to create workqueue [ 389.818738][T12503] EXT4-fs (loop1): mount failed [ 389.973541][T12541] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 390.025703][ T21] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 390.117844][ T8208] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 390.357539][ T8208] usb 3-1: Using ep0 maxpacket: 32 [ 390.569586][ T8208] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 390.767630][ T8208] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 390.776680][ T8208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.789976][ T8208] usb 3-1: Product: syz [ 390.794145][ T8208] usb 3-1: Manufacturer: syz [ 390.801020][ T8208] usb 3-1: SerialNumber: syz [ 391.046417][ T8208] usb 3-1: USB disconnect, device number 6 [ 391.837464][ T8208] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 392.097585][ T8208] usb 3-1: Using ep0 maxpacket: 32 [ 392.347610][ T8208] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 01:13:51 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80201, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:51 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x4, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 392.538483][ T8208] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 392.557542][ T8208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.600437][ T8208] usb 3-1: Product: syz [ 392.605740][T12573] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 392.615045][ T8208] usb 3-1: Manufacturer: syz [ 392.619832][ T8208] usb 3-1: SerialNumber: syz 01:13:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x5, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) [ 392.673684][T12576] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 392.706744][T12576] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) [ 392.742092][T12576] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:51 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 392.804819][T12576] EXT4-fs (loop1): get root inode failed [ 392.826527][ T275] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 392.828979][T12576] EXT4-fs (loop1): mount failed 01:13:51 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000280)=0x2, 0x4) [ 392.919660][ T8208] usb 3-1: USB disconnect, device number 7 [ 392.976791][T12576] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 393.030486][T12576] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 393.071941][T12611] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 393.085557][T12576] EXT4-fs: failed to create workqueue [ 393.106158][T12576] EXT4-fs (loop1): mount failed [ 393.147185][ T196] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:54 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x6, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, &(0x7f0000000040)) 01:13:54 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80202, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 395.680859][T12638] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x7, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:54 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, 0x0) [ 395.724786][T12642] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 395.757950][T12642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) [ 395.800737][T12642] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) 01:13:54 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 395.841127][T12642] EXT4-fs (loop1): get root inode failed [ 395.859220][T12642] EXT4-fs (loop1): mount failed [ 395.883254][ T9213] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 395.994192][T12642] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 396.005378][T12642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 396.033882][T12642] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 396.067044][T12671] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 396.070587][T12642] EXT4-fs (loop1): get root inode failed [ 396.135017][T12642] EXT4-fs (loop1): mount failed [ 396.218059][ T9213] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 396.227698][ T6783] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 396.509045][ T6783] usb 3-1: Using ep0 maxpacket: 32 [ 396.642754][ T6783] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 396.674550][ T6783] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 396.878205][ T6783] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 396.887760][ T6783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.895781][ T6783] usb 3-1: Product: syz [ 396.901397][ T6783] usb 3-1: Manufacturer: syz [ 396.905990][ T6783] usb 3-1: SerialNumber: syz [ 397.164536][T10731] usb 3-1: USB disconnect, device number 8 [ 397.947874][ T2668] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 398.187720][ T2668] usb 3-1: Using ep0 maxpacket: 32 [ 398.309304][ T2668] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 398.319150][ T2668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 398.489081][ T2668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.498211][ T2668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.506207][ T2668] usb 3-1: Product: syz [ 398.511029][ T2668] usb 3-1: Manufacturer: syz [ 398.515666][ T2668] usb 3-1: SerialNumber: syz 01:13:57 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) 01:13:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x8, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:57 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80203, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 398.767906][ T23] usb 3-1: USB disconnect, device number 9 [ 398.777567][T12712] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x9, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:57 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 398.820108][T12711] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 398.859769][T12711] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:13:57 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 398.873549][T12711] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 398.890404][T12711] EXT4-fs (loop1): get root inode failed [ 398.896050][T12711] EXT4-fs (loop1): mount failed [ 398.922137][ T196] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0xe, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 399.041745][T12711] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 399.087708][T12711] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 399.158634][T12711] EXT4-fs: failed to create workqueue [ 399.192072][T12711] EXT4-fs (loop1): mount failed [ 399.199312][T12750] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 399.316149][ T275] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:58 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:13:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0xf, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:58 executing program 0: syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:13:58 executing program 2: socket(0x23, 0x0, 0x4) 01:13:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80300, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:13:58 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 399.720542][T12768] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 399.753377][T12773] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:13:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x60, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:13:58 executing program 2: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x701400) [ 399.772113][T12768] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 399.808105][T12768] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:58 executing program 0: syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 399.824196][T12768] EXT4-fs (loop1): get root inode failed [ 399.835716][T12768] EXT4-fs (loop1): mount failed 01:13:58 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:13:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x0, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 399.881909][T12768] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 399.893947][ T27] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 399.909151][T12768] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 399.972988][T12768] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:13:58 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 400.050862][T12768] EXT4-fs (loop1): get root inode failed [ 400.095073][T12768] EXT4-fs (loop1): mount failed [ 400.211529][T12802] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:01 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:01 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x531082, 0x0) 01:14:01 executing program 0: syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0xb, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80301, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:01 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:01 executing program 2: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) 01:14:01 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 402.817139][T12820] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 402.837502][T12819] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 402.849030][T12820] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 402.874334][T12820] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 402.900752][T12820] EXT4-fs (loop1): get root inode failed [ 402.906915][T12820] EXT4-fs (loop1): mount failed 01:14:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x2, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:01 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 402.985139][T12820] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 403.006579][ T196] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x3, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 403.044746][T12820] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 403.110860][T12820] EXT4-fs: failed to create workqueue [ 403.156878][T12820] EXT4-fs (loop1): mount failed [ 403.216145][T12849] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:02 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:02 executing program 2: syz_mount_image$zonefs(&(0x7f0000000180)='zonefs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2000028, &(0x7f0000000500)) 01:14:02 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80302, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x4, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x5, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 403.852039][T12875] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 403.863659][T12877] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:02 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}, [{}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2a, &(0x7f0000000080)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc000, 0x0]}]}}) 01:14:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 403.940023][T12875] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:02 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 403.987280][T12875] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 404.001457][ T275] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 404.124207][T12875] EXT4-fs (loop1): get root inode failed [ 404.143760][T12875] EXT4-fs (loop1): mount failed 01:14:02 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x0, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x6, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 404.272055][T12900] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 404.332414][ T9213] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 404.368139][ T23] usb 3-1: new full-speed USB device number 10 using dummy_hcd 01:14:03 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80303, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x0, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:03 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x7, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 404.768208][ T23] usb 3-1: not running at top speed; connect to a high speed hub 01:14:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x8, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 404.822052][T12918] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 404.858297][ T23] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 404.877551][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.882168][T12923] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x0, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 404.991810][ T9213] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 405.007921][T12923] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 405.068186][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 405.077257][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.111332][T12923] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 405.147630][ T23] usb 3-1: Product: syz [ 405.151871][ T23] usb 3-1: Manufacturer: syz [ 405.156473][ T23] usb 3-1: SerialNumber: syz [ 405.175915][T12923] EXT4-fs (loop1): get root inode failed [ 405.182713][T12923] EXT4-fs (loop1): mount failed [ 405.219057][T12895] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.320371][T12923] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 405.346085][T12923] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 405.383329][T12923] EXT4-fs: failed to create workqueue [ 405.397742][T12923] EXT4-fs (loop1): mount failed [ 405.500415][ T23] usb 3-1: USB disconnect, device number 10 01:14:04 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x2710}}) 01:14:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x9, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:04 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, 0x0, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x803f7, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, 0x0, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 406.182912][T12963] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 406.205117][T12965] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xe, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:04 executing program 2: socket(0x2, 0x0, 0x40000002) 01:14:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:04 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) [ 406.293231][T12965] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 406.346735][ T21] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 406.392513][T12965] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:14:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, 0x0, 0x0) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x40) [ 406.514012][T12965] EXT4-fs (loop1): get root inode failed [ 406.525516][T12965] EXT4-fs (loop1): mount failed 01:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x13, 0xa, 0x401}, 0x14}}, 0x0) [ 406.625255][T12965] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 406.657576][T12965] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 406.671789][T12965] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 406.685968][T12965] EXT4-fs (loop1): get root inode failed [ 406.693618][T12965] EXT4-fs (loop1): mount failed 01:14:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x803fe, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:05 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) [ 406.809513][T12994] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x60, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 01:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 407.006677][T13008] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:05 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x15f, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 407.100824][T13008] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 407.125809][T13008] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 407.160061][T13008] EXT4-fs (loop1): get root inode failed [ 407.171397][T13008] EXT4-fs (loop1): mount failed 01:14:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80402, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:05 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={[{@size={'size', 0x3d, [0x25, 0x31]}}]}) 01:14:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x300, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:06 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 407.394521][T13030] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 01:14:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x500, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 407.485542][T13037] tmpfs: Bad value for 'size' [ 407.492755][T13036] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 407.540816][T13037] tmpfs: Bad value for 'size' [ 407.593788][T13036] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:06 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:14:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:06 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) [ 407.757631][T13036] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 407.775972][T13036] EXT4-fs (loop1): get root inode failed [ 407.817546][T13036] EXT4-fs (loop1): mount failed 01:14:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x600, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:06 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) [ 407.975636][T13036] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 408.052436][T13036] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 408.144274][T13036] EXT4-fs: failed to create workqueue [ 408.164498][T13036] EXT4-fs (loop1): mount failed 01:14:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80403, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_ext_create_conn={{0x2043, 0xa}, {0x0, 0x0, 0x0, @fixed}}}, 0xe) 01:14:06 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x700, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:06 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r3+60000000}}, 0x0) 01:14:07 executing program 2: socket(0xa, 0x6, 0x0) 01:14:07 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x900, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:07 executing program 2: syz_mount_image$btrfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000080)="11", 0x1, 0x80000001}, {&(0x7f0000000280)="f3", 0x1}, {&(0x7f0000000400)="0e", 0x1, 0x10000}], 0x0, 0x0) [ 408.583191][T13090] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 408.673034][T13090] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) [ 408.731005][T13090] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 408.767912][T13090] EXT4-fs (loop1): get root inode failed [ 408.773577][T13090] EXT4-fs (loop1): mount failed [ 408.921057][T13090] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 408.967524][T13090] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 408.997537][T13090] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 409.055368][T13090] EXT4-fs (loop1): get root inode failed [ 409.063294][T13090] EXT4-fs (loop1): mount failed 01:14:07 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80412, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:07 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xe00, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7ff) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) recvfrom$inet6(r3, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0xfffffffffffffe7e) shutdown(r3, 0x1) sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 01:14:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) tkill(r0, 0x40) 01:14:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf00, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:07 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:08 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 409.366564][T13144] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 409.467261][T13144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x3f00, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 409.537370][T13144] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 409.598361][T13144] EXT4-fs (loop1): get root inode failed [ 409.604856][T13144] EXT4-fs (loop1): mount failed 01:14:08 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) [ 409.864576][T13144] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 409.898591][T13144] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 409.955351][T13144] EXT4-fs: failed to create workqueue [ 409.977219][T13144] EXT4-fs (loop1): mount failed 01:14:08 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80413, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) tkill(r0, 0x40) 01:14:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x5f01, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:08 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)) 01:14:08 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x6000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 410.209646][T13184] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 410.245005][T13184] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:08 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) tkill(r0, 0x40) [ 410.399535][T13184] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 410.426036][T13184] EXT4-fs (loop1): get root inode failed [ 410.451119][T13184] EXT4-fs (loop1): mount failed 01:14:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x34000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 410.580274][T13184] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 410.623799][T13184] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 410.667098][T13184] EXT4-fs: failed to create workqueue [ 410.672678][T13184] EXT4-fs (loop1): mount failed 01:14:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80414, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:09 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:09 executing program 2: syz_mount_image$qnx6(&(0x7f0000000100)='qnx6\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000740)) 01:14:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x400300, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) tkill(r0, 0x40) 01:14:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf0ffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 410.853591][T13217] FAT-fs (loop3): bogus number of reserved sectors [ 410.855736][T13218] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 410.879550][T13217] FAT-fs (loop3): Can't find a valid FAT filesystem [ 410.892261][T13225] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:09 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) [ 410.911400][T13218] qnx6: wrong signature (magic) in superblock #1. [ 410.933213][T13225] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 410.946102][T13218] qnx6: unable to read the first superblock [ 410.990542][ T5] Bluetooth: hci0: command 0x0406 tx timeout [ 411.045340][ T5] Bluetooth: hci1: command 0x0406 tx timeout [ 411.069654][T13225] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:14:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) gettid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) 01:14:09 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 411.091172][T13225] EXT4-fs (loop1): get root inode failed [ 411.096826][T13225] EXT4-fs (loop1): mount failed [ 411.106841][ T5] Bluetooth: hci2: command 0x0406 tx timeout 01:14:09 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x90}}, 0x8801) socket(0x1d, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x4141, 0x0) 01:14:09 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80415, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 411.192131][ T5] Bluetooth: hci5: command 0x0406 tx timeout [ 411.222585][ T5] Bluetooth: hci3: command 0x0406 tx timeout 01:14:09 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) 01:14:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x1000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 411.262564][ T5] Bluetooth: hci4: command 0x0406 tx timeout 01:14:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) gettid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) [ 411.303535][T13240] FAT-fs (loop3): bogus number of reserved sectors 01:14:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) gettid() r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) tkill(0x0, 0x40) [ 411.352889][T13240] FAT-fs (loop3): Can't find a valid FAT filesystem 01:14:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x0) 01:14:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x2000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 411.477974][T13258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 411.499758][T13252] can: request_module (can-proto-0) failed. [ 411.537611][T13258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 411.551156][T13259] can: request_module (can-proto-0) failed. [ 411.569849][T13258] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:14:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x3000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x0) 01:14:10 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r5+60000000}}, 0x0) [ 411.589420][T13258] EXT4-fs (loop1): get root inode failed [ 411.622703][T13258] EXT4-fs (loop1): mount failed 01:14:10 executing program 2: socket(0x28, 0x0, 0x206) [ 411.737752][T13275] FAT-fs (loop3): bogus number of reserved sectors [ 411.745980][T13258] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 411.759231][T13258] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 411.789349][T13275] FAT-fs (loop3): Can't find a valid FAT filesystem [ 411.805445][T13258] EXT4-fs: failed to create workqueue [ 411.814911][T13258] EXT4-fs (loop1): mount failed 01:14:10 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80416, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syslog(0x2, &(0x7f0000000300)=""/182, 0xb6) r0 = gettid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x0) 01:14:10 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 01:14:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x4000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:10 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:10 executing program 0: r0 = syz_io_uring_setup(0x36cf, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000180), &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) io_uring_enter(r0, 0x4a8f, 0x0, 0x0, &(0x7f0000000040)={[0x80000000]}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 01:14:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x5000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:10 executing program 2: socket(0x29, 0x80002, 0x0) [ 412.101281][T13307] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x6000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 412.147595][T13307] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 412.172242][T13310] FAT-fs (loop3): bogus number of reserved sectors 01:14:10 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) [ 412.207890][T13310] FAT-fs (loop3): Can't find a valid FAT filesystem [ 412.241573][T13307] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 412.299022][T13307] EXT4-fs (loop1): get root inode failed [ 412.315069][T13307] EXT4-fs (loop1): mount failed [ 412.412203][T13307] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 412.456681][T13307] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x7000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:11 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80417, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 412.533512][T13307] EXT4-fs: failed to create workqueue [ 412.570263][T13307] EXT4-fs (loop1): mount failed 01:14:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x8000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 412.682379][T13344] FAT-fs (loop3): bogus number of reserved sectors [ 412.712946][T13344] FAT-fs (loop3): Can't find a valid FAT filesystem 01:14:11 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x9000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 412.825497][T13351] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 412.837547][ T6783] usb 3-1: new full-speed USB device number 11 using dummy_hcd 01:14:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 412.867699][T13351] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 412.957068][T13351] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 412.972835][T13362] FAT-fs (loop3): bogus number of reserved sectors [ 412.981779][T13362] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.014892][T13351] EXT4-fs (loop1): get root inode failed [ 413.020687][T13351] EXT4-fs (loop1): mount failed [ 413.057639][ C1] [ 413.059999][ C1] ================================ [ 413.065101][ C1] WARNING: inconsistent lock state [ 413.070213][ C1] 5.9.0-rc8-next-20201008-syzkaller #0 Not tainted [ 413.076700][ C1] -------------------------------- [ 413.081799][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 413.088648][ C1] ksoftirqd/1/16 [HC0[0]:SC1[1]:HE0:SE0] takes: [ 413.094878][ C1] ffff88802242ec18 (&xa->xa_lock#9){+.?.}-{2:2}, at: xa_destroy+0xaa/0x350 01:14:11 executing program 0: clock_gettime(0x0, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000d, 0xffffffffffffffff) 01:14:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xe000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 413.103564][ C1] {SOFTIRQ-ON-W} state was registered at: [ 413.109307][ C1] lock_acquire+0x1f2/0xaa0 [ 413.113897][ C1] _raw_spin_lock+0x2a/0x40 [ 413.119285][ C1] io_uring_add_task_file+0x207/0x430 [ 413.124741][ C1] io_uring_setup+0x2727/0x3660 [ 413.129673][ C1] do_syscall_64+0x2d/0x70 [ 413.134176][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 413.140142][ C1] irq event stamp: 58402819 [ 413.144677][ C1] hardirqs last enabled at (58402818): [] _raw_spin_unlock_irqrestore+0x6f/0x90 01:14:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 413.155351][ C1] hardirqs last disabled at (58402819): [] _raw_spin_lock_irqsave+0xa9/0xd0 [ 413.165617][ C1] softirqs last enabled at (58402774): [] run_ksoftirqd+0xcf/0x170 [ 413.175160][ C1] softirqs last disabled at (58402779): [] run_ksoftirqd+0xcf/0x170 [ 413.184686][ C1] [ 413.184686][ C1] other info that might help us debug this: [ 413.192735][ C1] Possible unsafe locking scenario: [ 413.192735][ C1] [ 413.200172][ C1] CPU0 [ 413.203430][ C1] ---- [ 413.206710][ C1] lock(&xa->xa_lock#9); [ 413.211718][ C1] [ 413.215162][ C1] lock(&xa->xa_lock#9); [ 413.219647][ C1] [ 413.219647][ C1] *** DEADLOCK *** [ 413.219647][ C1] [ 413.227802][ C1] 1 lock held by ksoftirqd/1/16: [ 413.232722][ C1] #0: ffffffff8a554c80 (rcu_callback){....}-{0:0}, at: rcu_core+0x5d8/0x1240 [ 413.241626][ C1] [ 413.241626][ C1] stack backtrace: [ 413.247505][ C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.9.0-rc8-next-20201008-syzkaller #0 [ 413.256857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.266906][ C1] Call Trace: [ 413.270188][ C1] dump_stack+0x198/0x1fb [ 413.274557][ C1] mark_lock.cold+0x32/0x74 [ 413.279073][ C1] ? lock_chain_count+0x20/0x20 [ 413.283930][ C1] ? mark_lock+0xf7/0x2420 [ 413.288351][ C1] ? deref_stack_reg+0x150/0x150 [ 413.293271][ C1] ? lock_chain_count+0x20/0x20 [ 413.298106][ C1] ? __unwind_start+0x517/0x800 [ 413.303014][ C1] ? create_prof_cpu_mask+0x20/0x20 [ 413.308232][ C1] __lock_acquire+0x118a/0x56d0 [ 413.313438][ C1] ? lock_chain_count+0x20/0x20 [ 413.318275][ C1] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 413.324254][ C1] lock_acquire+0x1f2/0xaa0 [ 413.328778][ C1] ? xa_destroy+0xaa/0x350 [ 413.333194][ C1] ? lock_release+0x890/0x890 [ 413.337878][ C1] ? _raw_spin_lock_irqsave+0xa9/0xd0 [ 413.343247][ C1] _raw_spin_lock_irqsave+0x94/0xd0 [ 413.348513][ C1] ? xa_destroy+0xaa/0x350 [ 413.352917][ C1] xa_destroy+0xaa/0x350 [ 413.357151][ C1] ? xas_pause+0x3b0/0x3b0 [ 413.361545][ C1] ? lock_acquire+0x1f2/0xaa0 [ 413.366198][ C1] ? lock_release+0x890/0x890 [ 413.370902][ C1] ? free_obj_work+0x5b0/0x5b0 [ 413.375650][ C1] __io_uring_free+0x60/0xc0 [ 413.380254][ C1] __put_task_struct+0xff/0x3f0 [ 413.385104][ C1] delayed_put_task_struct+0x1f6/0x340 [ 413.390547][ C1] rcu_core+0x645/0x1240 [ 413.394770][ C1] ? rcu_gp_kthread+0x1ca0/0x1ca0 [ 413.399785][ C1] ? lock_is_held_type+0xbb/0xf0 [ 413.404756][ C1] __do_softirq+0x203/0xab6 [ 413.409257][ C1] ? __local_bh_disable_ip+0x190/0x190 [ 413.414688][ C1] run_ksoftirqd+0xcf/0x170 [ 413.419249][ C1] smpboot_thread_fn+0x655/0x9e0 [ 413.424188][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 413.430527][ C1] ? __kthread_parkme+0x13f/0x1e0 [ 413.435536][ C1] ? __smpboot_create_thread.part.0+0x360/0x360 [ 413.441758][ C1] kthread+0x3af/0x4a0 [ 413.445812][ C1] ? __kthread_bind_mask+0xc0/0xc0 [ 413.450947][ C1] ret_from_fork+0x1f/0x30 [ 413.490242][T13351] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 413.508595][T13351] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 413.524394][T13351] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 413.566810][T13377] FAT-fs (loop3): bogus number of reserved sectors [ 413.602269][T13351] EXT4-fs (loop1): get root inode failed [ 413.609964][T13377] FAT-fs (loop3): Can't find a valid FAT filesystem [ 413.616851][T13351] EXT4-fs (loop1): mount failed [ 413.668075][ T6783] usb 3-1: not running at top speed; connect to a high speed hub [ 413.768170][ T6783] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 413.779285][ T6783] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.794415][ T6783] usb 3-1: config 1 interface 0 has no altsetting 0 [ 413.960771][ T6783] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 413.979658][ T6783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.995761][ T6783] usb 3-1: Product: syz [ 414.000862][ T6783] usb 3-1: Manufacturer: syz [ 414.005698][ T6783] usb 3-1: SerialNumber: syz [ 414.031374][T13338] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 414.329836][ T6783] usb 3-1: USB disconnect, device number 11 [ 415.037506][T10731] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 415.437534][T10731] usb 3-1: not running at top speed; connect to a high speed hub [ 415.517522][T10731] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 415.529624][T10731] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 415.543491][T10731] usb 3-1: config 1 interface 0 has no altsetting 0 01:14:14 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) 01:14:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x3f000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:14 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000140)={0x0, 0x0, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) 01:14:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80418, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:14 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) [ 415.731056][T13414] FAT-fs (loop3): bogus number of reserved sectors [ 415.737811][T10731] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 415.752035][T13421] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 415.760777][T10731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.763247][T13421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x5f010000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 415.780688][T13414] FAT-fs (loop3): Can't find a valid FAT filesystem [ 415.788583][T13421] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 415.802856][T13421] EXT4-fs (loop1): get root inode failed [ 415.808613][T13421] EXT4-fs (loop1): mount failed [ 415.818954][T10731] usb 3-1: Product: syz 01:14:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 415.847802][T10731] usb 3-1: can't set config #1, error -71 [ 415.874092][T10731] usb 3-1: USB disconnect, device number 12 [ 415.909171][T13421] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x60000000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 415.953284][T13442] FAT-fs (loop3): bogus number of reserved sectors [ 415.958883][T13421] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 415.960242][T13442] FAT-fs (loop3): Can't find a valid FAT filesystem [ 415.987951][T13421] EXT4-fs: failed to create workqueue [ 415.993379][T13421] EXT4-fs (loop1): mount failed 01:14:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x9effffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 416.007528][ T6783] usb 1-1: new high-speed USB device number 2 using dummy_hcd 01:14:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80419, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:14 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 416.200126][T13459] FAT-fs (loop3): bogus number of reserved sectors [ 416.211897][T13460] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 416.226876][T13459] FAT-fs (loop3): Can't find a valid FAT filesystem [ 416.234566][T13460] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 416.247549][T10731] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 416.256237][T13460] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 416.276165][T13460] EXT4-fs (loop1): get root inode failed [ 416.283019][T13460] EXT4-fs (loop1): mount failed [ 416.287477][ T6783] usb 1-1: Using ep0 maxpacket: 32 [ 416.362608][T13460] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 416.384175][T13460] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 416.409165][T13460] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 416.429919][T13460] EXT4-fs (loop1): get root inode failed [ 416.436077][T13460] EXT4-fs (loop1): mount failed [ 416.517546][ T6783] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 416.667628][T10731] usb 3-1: not running at top speed; connect to a high speed hub [ 416.740517][ T6783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 416.748091][T10731] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 416.769028][ T6783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.780074][T10731] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 416.796561][ T6783] usb 1-1: Product: syz [ 416.820377][ T6783] usb 1-1: Manufacturer: syz [ 416.825161][ T6783] usb 1-1: SerialNumber: syz [ 416.830535][T10731] usb 3-1: config 1 interface 0 has no altsetting 0 [ 417.017575][T10731] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 417.027317][T10731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.036118][T10731] usb 3-1: Product: syz [ 417.041122][T10731] usb 3-1: Manufacturer: syz [ 417.046418][T10731] usb 3-1: SerialNumber: syz [ 417.068938][T13424] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 417.081688][ T23] usb 1-1: USB disconnect, device number 2 [ 417.390305][T10731] usb 3-1: USB disconnect, device number 13 01:14:16 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) 01:14:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf0ffffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 417.868522][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 418.117505][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 418.167524][ T2668] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 418.348211][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 418.537624][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.547102][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.556107][ T23] usb 1-1: Product: syz [ 418.560960][ T23] usb 1-1: Manufacturer: syz [ 418.565710][ T23] usb 1-1: SerialNumber: syz [ 418.568066][ T2668] usb 3-1: not running at top speed; connect to a high speed hub 01:14:17 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2) 01:14:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8041a, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:17 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xf5ffffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 418.667707][ T2668] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 418.679155][ T2668] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.702949][ T2668] usb 3-1: config 1 interface 0 has no altsetting 0 [ 418.711487][T10731] usb 1-1: USB disconnect, device number 3 01:14:17 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, 0x0) [ 418.792830][T13525] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 418.822966][T13528] FAT-fs (loop3): bogus number of reserved sectors [ 418.830772][T13528] FAT-fs (loop3): Can't find a valid FAT filesystem 01:14:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xfcffffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 418.845000][T13525] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 418.867676][ T2668] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 418.878057][T13525] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 418.884916][ T2668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 01:14:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xfffff000, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:17 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 418.941641][T13525] EXT4-fs (loop1): get root inode failed [ 418.969400][T13525] EXT4-fs (loop1): mount failed [ 418.988768][ T2668] usb 3-1: Product: syz [ 418.993778][ T2668] usb 3-1: Manufacturer: syz [ 419.012593][T13525] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 419.013027][ T2668] usb 3-1: SerialNumber: syz 01:14:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xffffff7f, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 419.043982][T13525] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 419.090937][T13525] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 419.104320][T13525] EXT4-fs (loop1): get root inode failed [ 419.106463][T13549] FAT-fs (loop3): bogus number of reserved sectors [ 419.110520][T13525] EXT4-fs (loop1): mount failed [ 419.120328][T13503] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.159015][T13549] FAT-fs (loop3): Can't find a valid FAT filesystem [ 419.327576][T10731] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 419.491424][ T2668] usb 3-1: USB disconnect, device number 14 [ 419.567560][T10731] usb 1-1: Using ep0 maxpacket: 32 [ 419.847580][T10731] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 419.857103][T10731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.866156][T10731] usb 1-1: Product: syz [ 419.871461][T10731] usb 1-1: Manufacturer: syz [ 419.876270][T10731] usb 1-1: SerialNumber: syz 01:14:18 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) 01:14:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8041b, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xffffff9e, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:18 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xfffffff0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xfffffff5, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 420.013677][T13587] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 420.028867][T13586] FAT-fs (loop3): bogus number of reserved sectors [ 420.042254][T13586] FAT-fs (loop3): Can't find a valid FAT filesystem [ 420.053562][T13587] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 420.080172][T13587] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 420.122685][ T23] usb 1-1: USB disconnect, device number 4 [ 420.154509][T13587] EXT4-fs (loop1): get root inode failed [ 420.181454][T13587] EXT4-fs (loop1): mount failed [ 420.257828][T13587] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 420.277568][T13587] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 420.299976][T10731] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 420.308195][T13587] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 420.330689][T13587] EXT4-fs (loop1): get root inode failed [ 420.345678][T13587] EXT4-fs (loop1): mount failed [ 420.707555][T10731] usb 3-1: not running at top speed; connect to a high speed hub [ 420.787895][T10731] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 420.799552][T10731] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.822570][T10731] usb 3-1: config 1 interface 0 has no altsetting 0 [ 420.907697][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 420.988338][T10731] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.998778][T10731] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.006867][T10731] usb 3-1: Product: syz [ 421.012449][T10731] usb 3-1: Manufacturer: syz [ 421.019683][T10731] usb 3-1: SerialNumber: syz [ 421.039063][T13592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 421.177539][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 421.340584][T10731] usb 3-1: USB disconnect, device number 15 [ 421.497582][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 421.508187][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.516489][ T23] usb 1-1: Product: syz [ 421.521205][ T23] usb 1-1: Manufacturer: syz [ 421.525873][ T23] usb 1-1: SerialNumber: syz 01:14:20 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000ac0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x2f]}}}}]}) 01:14:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xfffffffc, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80500, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:20 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r1, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:20 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) [ 421.777860][T10731] usb 1-1: USB disconnect, device number 5 01:14:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0xffffffff, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 421.894528][T13657] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 421.897042][T13656] FAT-fs (loop3): bogus number of reserved sectors [ 421.923060][T13663] tmpfs: Bad value for 'mpol' [ 421.930349][T13657] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) 01:14:20 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) 01:14:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 421.961091][T13656] FAT-fs (loop3): Can't find a valid FAT filesystem [ 421.966749][T13657] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 421.997273][T13657] EXT4-fs (loop1): get root inode failed [ 422.003414][T13657] EXT4-fs (loop1): mount failed 01:14:20 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 01:14:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x2, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 422.032100][T13663] tmpfs: Bad value for 'mpol' 01:14:20 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, &(0x7f0000000180)) 01:14:20 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x2, 0x4) [ 422.158423][T13657] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors 01:14:20 executing program 2: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x4, 0x7a, 0xff, 0x101, 0x10, @ipv4={[], [], @multicast2}, @private1, 0x7, 0x700, 0x1, 0x5}}) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x20, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xc6, 0x1, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x64, 0x9, 0x4}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xed, 0x0, 0x8, 0x40, 0x80}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x3, 0xf, 0x6294, [0x3f30, 0x3fcf, 0xff0000, 0xc0, 0x0, 0xff3fcf]}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xe, 0xc, 0xfffa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x4, 0x9, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x5, 0x1, 0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x3f, 0x4, 0x4, 0xf000, 0x8, [0xc000, 0xc0, 0x3f3f, 0xc0]}]}, 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x245f}}]}) 01:14:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x3, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) [ 422.204880][T13687] FAT-fs (loop3): bogus number of reserved sectors [ 422.207362][T13657] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 422.236349][T13687] FAT-fs (loop3): Can't find a valid FAT filesystem [ 422.254006][T13657] EXT4-fs: failed to create workqueue [ 422.276363][T13657] EXT4-fs (loop1): mount failed 01:14:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80501, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) [ 422.443057][T13705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.455771][T13705] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 422.487662][T13705] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 422.507843][T13705] EXT4-fs (loop1): get root inode failed [ 422.513659][T13705] EXT4-fs (loop1): mount failed [ 422.539189][T10731] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 422.584879][T13705] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.599336][T13705] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 422.613768][T13705] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated 01:14:21 executing program 5: timer_create(0x0, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x8ec3, 0x0) pipe(&(0x7f00000003c0)) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x1000000000007, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, r4+60000000}}, 0x0) 01:14:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x2, 0x4) 01:14:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x4, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c0008802000020000", 0x13}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 422.650502][T13705] EXT4-fs (loop1): get root inode failed [ 422.656483][T13705] EXT4-fs (loop1): mount failed 01:14:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80502, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf447af6806a9b8b6d4ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000026856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0300000002", 0x5, 0x800}], 0x81, &(0x7f00000000c0)=ANY=[]) 01:14:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x5, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:21 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x2, 0x4) [ 422.820711][T13724] FAT-fs (loop3): invalid media value (0x00) [ 422.839782][T13724] FAT-fs (loop3): Can't find a valid FAT filesystem 01:14:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, 0x0, 0x7, 0x5, 0x0, 0x6, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 01:14:21 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c0008802000020000", 0x13}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) [ 422.889714][T13734] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 422.944910][T13734] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3647!=0) [ 422.958020][T10731] usb 3-1: not running at top speed; connect to a high speed hub [ 422.994684][T13734] EXT4-fs error (device loop1): ext4_fill_super:4720: inode #2: comm syz-executor.1: iget: root inode unallocated [ 423.030574][T13734] EXT4-fs (loop1): get root inode failed [ 423.043013][T13734] EXT4-fs (loop1): mount failed [ 423.049867][T10731] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 423.080951][T13745] FAT-fs (loop3): invalid media value (0x00)