[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Started OpenBSD Secure Shell server. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.141' (ECDSA) to the list of known hosts. 2020/04/14 18:15:44 fuzzer started 2020/04/14 18:15:46 dialing manager at 10.128.0.26:38241 2020/04/14 18:15:46 syscalls: 3030 2020/04/14 18:15:46 code coverage: enabled 2020/04/14 18:15:46 comparison tracing: enabled 2020/04/14 18:15:46 extra coverage: enabled 2020/04/14 18:15:46 setuid sandbox: enabled 2020/04/14 18:15:46 namespace sandbox: enabled 2020/04/14 18:15:46 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/14 18:15:46 fault injection: enabled 2020/04/14 18:15:46 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/14 18:15:46 net packet injection: enabled 2020/04/14 18:15:46 net device setup: enabled 2020/04/14 18:15:46 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/14 18:15:46 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/14 18:15:46 USB emulation: /dev/raw-gadget does not exist 18:17:19 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setuid(0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) syzkaller login: [ 137.365116][ T7240] IPVS: ftp: loaded support on port[0] = 21 [ 137.481824][ T7240] chnl_net:caif_netlink_parms(): no params data found 18:17:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfdffbffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x94}}, 0x0) [ 137.552881][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.560914][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.569471][ T7240] device bridge_slave_0 entered promiscuous mode [ 137.579220][ T7240] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.586628][ T7240] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.594922][ T7240] device bridge_slave_1 entered promiscuous mode [ 137.618126][ T7240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.629848][ T7240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.652965][ T7240] team0: Port device team_slave_0 added [ 137.660760][ T7240] team0: Port device team_slave_1 added [ 137.678505][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.686065][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.712756][ T7240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.726748][ T7240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.734692][ T7240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.772424][ T7240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.799857][ T7394] IPVS: ftp: loaded support on port[0] = 21 18:17:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x109) r3 = dup(r0) write$uinput_user_dev(r3, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) [ 137.862937][ T7240] device hsr_slave_0 entered promiscuous mode [ 137.902112][ T7240] device hsr_slave_1 entered promiscuous mode [ 138.045591][ T7406] IPVS: ftp: loaded support on port[0] = 21 18:17:20 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4}, 0xc2706221583c3268, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 138.207972][ T7240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.289633][ T7240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.345042][ T7394] chnl_net:caif_netlink_parms(): no params data found [ 138.362859][ T7240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.426130][ T7240] netdevsim netdevsim0 netdevsim3: renamed from eth3 18:17:20 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0}, 0x20) [ 138.578555][ T7574] IPVS: ftp: loaded support on port[0] = 21 [ 138.718570][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.740781][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.760873][ T7394] device bridge_slave_0 entered promiscuous mode [ 138.776124][ T7406] chnl_net:caif_netlink_parms(): no params data found [ 138.804882][ T7394] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.814869][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.824493][ T7394] device bridge_slave_1 entered promiscuous mode 18:17:21 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0x20, 0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x78) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}, 0x40000}], 0xc6, 0x24000003) [ 138.853340][ T7690] IPVS: ftp: loaded support on port[0] = 21 [ 138.916562][ T7394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.929698][ T7394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.976120][ T7240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.058318][ T7574] chnl_net:caif_netlink_parms(): no params data found [ 139.074254][ T7394] team0: Port device team_slave_0 added [ 139.087518][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.095582][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.103697][ T7406] device bridge_slave_0 entered promiscuous mode [ 139.129972][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.138391][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.149949][ T7394] team0: Port device team_slave_1 added [ 139.160343][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.168277][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.176784][ T7406] device bridge_slave_1 entered promiscuous mode [ 139.188788][ T7240] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.228391][ T7840] IPVS: ftp: loaded support on port[0] = 21 [ 139.254500][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.263529][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.272088][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.279273][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.287378][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.296307][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.305244][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.312365][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.320103][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.334668][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.345478][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.374334][ T7394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.424129][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.433433][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.452536][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.459638][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.472586][ T7574] device bridge_slave_0 entered promiscuous mode [ 139.480327][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.488671][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.515162][ T7394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.545609][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.558073][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.566796][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.578876][ T7574] device bridge_slave_1 entered promiscuous mode [ 139.587826][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.637057][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 139.683510][ T7394] device hsr_slave_0 entered promiscuous mode [ 139.731035][ T7394] device hsr_slave_1 entered promiscuous mode [ 139.770816][ T7394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.778602][ T7394] Cannot create hsr debugfs directory [ 139.786180][ T7406] team0: Port device team_slave_0 added [ 139.811927][ T7406] team0: Port device team_slave_1 added [ 139.833884][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.843711][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.854960][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.865315][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.877745][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.900518][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.907606][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.935117][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.947613][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.955049][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.981394][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.012727][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.022896][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.058693][ T7574] team0: Port device team_slave_0 added [ 140.067964][ T7574] team0: Port device team_slave_1 added [ 140.113509][ T7406] device hsr_slave_0 entered promiscuous mode [ 140.150871][ T7406] device hsr_slave_1 entered promiscuous mode [ 140.200547][ T7406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.208114][ T7406] Cannot create hsr debugfs directory [ 140.221483][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.229707][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.289282][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.305049][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.335018][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.358996][ T7240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.372822][ T7240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.395609][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.403942][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.424909][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.433726][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.461201][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.492459][ T7240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.506072][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.513698][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.522000][ T7690] device bridge_slave_0 entered promiscuous mode [ 140.535172][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.542725][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.550670][ T7690] device bridge_slave_1 entered promiscuous mode [ 140.557550][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.566463][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.637449][ T7394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.673867][ T7574] device hsr_slave_0 entered promiscuous mode [ 140.720890][ T7574] device hsr_slave_1 entered promiscuous mode [ 140.760512][ T7574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.768075][ T7574] Cannot create hsr debugfs directory [ 140.783957][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.794226][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.808567][ T7840] chnl_net:caif_netlink_parms(): no params data found [ 140.831405][ T7394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.923856][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.936700][ T7394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.017645][ T7690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.032598][ T7394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.070977][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.079098][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.108834][ T7240] device veth0_vlan entered promiscuous mode [ 141.118582][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.127662][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.150934][ T7690] team0: Port device team_slave_0 added [ 141.200145][ T7690] team0: Port device team_slave_1 added [ 141.211881][ T7240] device veth1_vlan entered promiscuous mode [ 141.226517][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.234003][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.243160][ T7840] device bridge_slave_0 entered promiscuous mode [ 141.254554][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.261774][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.269393][ T7840] device bridge_slave_1 entered promiscuous mode [ 141.329785][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.339633][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.366677][ T7690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.406022][ T7840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.420268][ T7840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.435572][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.445904][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.457325][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.466347][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.475606][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.483333][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.509895][ T7690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.521619][ T7406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 141.564976][ T7406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 141.628871][ T7240] device veth0_macvtap entered promiscuous mode [ 141.683399][ T7690] device hsr_slave_0 entered promiscuous mode [ 141.710836][ T7690] device hsr_slave_1 entered promiscuous mode [ 141.760584][ T7690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.768276][ T7690] Cannot create hsr debugfs directory [ 141.777758][ T7406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 141.815539][ T7840] team0: Port device team_slave_0 added [ 141.834908][ T7840] team0: Port device team_slave_1 added [ 141.842249][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.855463][ T7406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 141.916074][ T7574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 141.972954][ T7574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 142.036197][ T7574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 142.097822][ T7240] device veth1_macvtap entered promiscuous mode [ 142.118274][ T7574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 142.234469][ T7394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.247815][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.259729][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.286725][ T7840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.299884][ T7840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.307216][ T7840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.334236][ T7840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.393855][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.454280][ T7840] device hsr_slave_0 entered promiscuous mode [ 142.512934][ T7840] device hsr_slave_1 entered promiscuous mode [ 142.560433][ T7840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.568013][ T7840] Cannot create hsr debugfs directory [ 142.591110][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.607700][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.616992][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.628497][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.685269][ T7240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.694461][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.732733][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.742013][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.831659][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 142.840900][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 142.849475][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.856621][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.869688][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 142.882140][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.068282][ T7690] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.133044][ T7690] netdevsim netdevsim4 netdevsim1: renamed from eth1 18:17:25 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 143.173714][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.186865][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.208459][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.215643][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.270586][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.281862][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.320717][ T7690] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.362930][ T7690] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.384450][ T7574] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.392823][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 18:17:25 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 143.412479][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.461430][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.482950][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.492829][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 18:17:25 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 143.504062][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.519391][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.538316][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.549452][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 143.564480][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 143.574515][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 143.583908][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.593409][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.608692][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.615826][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.623815][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 143.632659][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 143.641763][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.648811][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.657600][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.666322][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 143.703976][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 18:17:26 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 143.723085][ T7394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 143.734445][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.745300][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.773587][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 143.791175][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 143.799656][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 143.813181][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 18:17:26 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 18:17:26 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) [ 143.877006][ T7840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 143.902951][ T7840] netdevsim netdevsim5 netdevsim1: renamed from eth1 18:17:26 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) [ 143.939504][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 143.962318][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.973095][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.990841][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.997940][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.027279][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.036635][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.052770][ T3147] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.059895][ T3147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.072164][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.081682][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.090479][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.113448][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.121650][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.130304][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.138833][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.148948][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.158454][ T7840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.212418][ T7840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.291236][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.299521][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.309799][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.320520][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.329290][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.338179][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.346568][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.355119][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.363543][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.371304][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.383232][ T7574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.409100][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.419774][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.432220][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.450247][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.457785][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.468932][ T7406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.508722][ T7690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.527137][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.559387][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.567331][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.579772][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.588792][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.619828][ T7690] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.634539][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.643063][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.652812][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.665369][ T7840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.684396][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.694141][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.703637][ T3147] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.710772][ T3147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.736162][ T7394] device veth0_vlan entered promiscuous mode [ 144.758120][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.766248][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.776138][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.785616][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.794492][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.803774][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.812678][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.821618][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.830304][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.838634][ T2692] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.845743][ T2692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.864666][ T7394] device veth1_vlan entered promiscuous mode [ 144.888052][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.898399][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.907204][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 144.915588][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 144.924011][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.934734][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.948934][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.963234][ T7406] device veth0_vlan entered promiscuous mode [ 144.974024][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.982881][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.991342][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.001256][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.027443][ T7406] device veth1_vlan entered promiscuous mode [ 145.039288][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.047651][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.056514][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.065030][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.073415][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.082195][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.090599][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.099095][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.107915][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.115038][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.124360][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.133232][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.141855][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.148943][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.157535][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.165385][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.174068][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.184462][ T7574] device veth0_vlan entered promiscuous mode [ 145.196843][ T7394] device veth0_macvtap entered promiscuous mode [ 145.227606][ T7690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.238614][ T7690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.256785][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.267834][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.277305][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.286310][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.295287][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.304175][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.313118][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.322566][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.332034][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.341116][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.349420][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.358493][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.368166][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.376540][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.384677][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.408694][ T7840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.423782][ T7840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.450885][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.459635][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.475516][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.484352][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.496183][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.504727][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.516613][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.525314][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.534776][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.542730][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.562268][ T7574] device veth1_vlan entered promiscuous mode [ 145.571473][ T7394] device veth1_macvtap entered promiscuous mode [ 145.593052][ T7690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.602697][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 145.611616][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.619551][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.634330][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.654769][ T7406] device veth0_macvtap entered promiscuous mode [ 145.671156][ T7406] device veth1_macvtap entered promiscuous mode [ 145.689864][ T7574] device veth0_macvtap entered promiscuous mode [ 145.699594][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 145.708907][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.717539][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.726267][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.734456][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.742487][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.749953][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.758779][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.767801][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.776080][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 145.799819][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 145.811673][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.824479][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.834808][ T7574] device veth1_macvtap entered promiscuous mode [ 145.853265][ T7840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.862113][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 145.870039][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.886106][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.899755][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 145.915222][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.927443][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.950875][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.951497][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.971366][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.981181][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.011721][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.022722][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.032884][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.043414][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.054870][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.067280][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.080561][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.092216][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.102717][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.113042][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 146.123623][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.134703][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.181919][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.194314][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.203473][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.213186][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 146.222535][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.231139][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.239676][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.249581][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.264307][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.276656][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.287858][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.299012][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.310995][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.323861][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.334795][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.345105][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.356334][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.366425][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 146.380422][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.392569][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.403156][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.416049][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.425298][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 146.437215][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 146.446263][ T7690] device veth0_vlan entered promiscuous mode [ 146.604415][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.617395][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.689130][ T8544] input: syz0 as /devices/virtual/input/input5 [ 146.719145][ T7690] device veth1_vlan entered promiscuous mode [ 146.737291][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.745788][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.754745][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.764722][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.773294][ T2686] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.784687][ T7840] device veth0_vlan entered promiscuous mode [ 146.843276][ T8552] input: syz0 as /devices/virtual/input/input6 [ 146.951425][ T7840] device veth1_vlan entered promiscuous mode [ 146.990719][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.027731][ T2687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 147.049627][ T7690] device veth0_macvtap entered promiscuous mode [ 147.101403][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.120684][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.142503][ T7690] device veth1_macvtap entered promiscuous mode [ 147.171883][ T7840] device veth0_macvtap entered promiscuous mode [ 147.179750][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.198557][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.208759][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.218556][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.231800][ T2726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.249852][ T7840] device veth1_macvtap entered promiscuous mode 18:17:29 executing program 1: 18:17:29 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:29 executing program 2: [ 147.274161][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.285595][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.322754][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.347072][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.380956][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.410069][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.419920][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.432147][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.444878][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.454366][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.479219][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.491140][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.507283][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.517191][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.528404][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.538767][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.549284][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.559267][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 147.570049][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.584068][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.598101][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.617160][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.632676][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.641786][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.650532][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.662073][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.673759][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.685460][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.696547][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.709742][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.720305][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.730417][ T7840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.741181][ T7840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.752830][ T7840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.763839][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.773392][ T2931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.783455][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.795212][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.805800][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.816819][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.827029][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.838312][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.848868][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.859485][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.869386][ T7690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 147.879852][ T7690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.891714][ T7690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.943211][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.951887][ T2929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.018408][ T0] NOHZ: local_softirq_pending 08 [ 148.171319][ C0] hrtimer: interrupt took 47340 ns 18:17:30 executing program 4: 18:17:30 executing program 3: 18:17:30 executing program 1: 18:17:30 executing program 2: 18:17:30 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:30 executing program 5: 18:17:30 executing program 5: 18:17:30 executing program 3: 18:17:30 executing program 1: 18:17:30 executing program 2: 18:17:30 executing program 4: 18:17:30 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:30 executing program 5: 18:17:30 executing program 2: 18:17:30 executing program 3: 18:17:30 executing program 1: 18:17:30 executing program 4: 18:17:30 executing program 3: 18:17:30 executing program 5: 18:17:30 executing program 2: 18:17:30 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:30 executing program 1: 18:17:30 executing program 4: 18:17:30 executing program 3: 18:17:31 executing program 5: 18:17:31 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f0000000300)="ad978b429b1fd13e11986dda2055f453682bd23f750ca58b879bf97060f72db59f271b389656d19d2d9d0a7af8aadfff35fa71f7ddf1559d41ea6bf2f7dc80be6d54ef0a83cb8be9cd990d36a250135d9f2255621240ca63c6dd6b81fbd6504713ff6b2a17e173e1610e9ace", 0x6c}, {&(0x7f0000000380)="47d882454c179353d5d4d16984c12fb1e4d4749701ef320657c2db5b0930f3ac727c28d1a0384e5415f85d6b45811c829ec9fab5aab2b47cc47b586518abe7830ecd7db0c980835b4a7fd60f6115b3b1c6666e3d6fbda4dc4c3df52f4650f9da95b606fd1a6def3f7b950f2c32c0e51d5f08662de21e08c6aa2024b6772c4257d519c039e607fffce785f3e8e6156e57641521b2b92ed84cbd41415dbe0080fcf6c56c4aef9e7178398e88b29568bb396acc7ee6a7af27fbef85b4689f0d3f7e98c58ea35598", 0xc6}, {&(0x7f0000000580)="4f47d14d99206e3e98a15a32090f17cde34c825a81a52d842e6eaaf1f7b10a6405485a38b1d686fcd150410abc3d1f4a683f95f71cd1dc7e393b2353ffca033aba5b806b338616a9bbf21c5230544cfb3a0d5049124e630efa7eaabee94b6d67f5dcba13b66fda045a36a2c161aa23c2207f4e44a99173a422295ccf402eaf14e26888d74fa56d6910531e62330a2a5260134fdf1ee29d20be100347f8c5d8a95f5ef99197460305a38192207b47ff201c1f2f6c571c68493c5fa9d794b7d7151f6ea7b2a617ffea99fcfa1202", 0xcd}], 0x5, &(0x7f0000000680)=[{0xa8, 0x0, 0x797f, "23ddd637646a0d1e0a6e9b1f718439f977aeb0e0ddb66f709db441f92f949cd3047f0a2f8f12a91cb61e5a07f45bc303fb5bdd17ec72e26e53c18224452c0a349ac511da1cb9b04511c8ef1bfc73237b8da62aee28a390b71661c9a6e561aff6ee49867ba55573baa9d16831d8c4d6791513864ba42ceafa4386f28de6a5ff4825930dd063e9882e8975353b0003125d64"}, {0x78, 0x101, 0x7ff, "5373b1b30f11237c36e43115ed45eb56a035f586e0fe24ca98110fd0c772955611f37aff1d9b85ba682a8444b97f2e7422ca6ecf5cf87e8864b189d9bb3144f10a5b8c107b526d848752992925cc674ac67b955e16f98eb76110408a976629678b8fc84596d1227b"}, {0x10, 0x110, 0x3}, {0x100, 0x10a, 0xff, "20eadbfb7d966baee0f56a1ba9710eeb0e0ac1955bdbcdca24093d0ee88ace21415485b3bd52a97303dda7803ae7a7eeaddc7fe8f4200c7fe3f721053c409c715eb465612bbfe199143bad0dcc769b3e91cf6db2b58c7f9901e59d9a46fe2d35f4ef53ec48cfafd6aea7d6c86a5ed8ef425a21d0b7bbc85cd7d82b7167a1721d6736828a24a6e6c68f431cfd7df19363d42202ec577ccf69bf0cbd393e6d4242ab786d9e71742367168a9d32ea67d870c34f8637b0827b32097916e7071b84216bae1472fe994d48daf1da8eece54c7e8cbfbba18067bfd541a5f0a650ba5040ad88212a83723c74b099469082f4"}], 0x230}, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:17:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:17:31 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:17:31 executing program 3: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000001c0)="046f005502ed2e3fd91c7bc12a7b3435e973b11fb5592ade7f0578b88c9ad5052df22724e7d4b322c7d9f971d1652bbce3731a9a0de33db9a864397fdf8e8c335d16aa3626e85b3b619d19deb7ad3ee6", 0x50}, {&(0x7f0000000240)="7aefc172d46e0b87f0d9640f5621845f611a957bfb981ded2f7237fa86e50286a0b16989a7f6169379d0bdcdea6ef8a9950a890834cc1221046151f60a2b0dca8b2261d90fe1a18a1f40255b822cdc5742aab299cf4e754e83fb2eeabc92c3e23ad81bc47abbc07a07a4f2bb9163c506b071af1bbbdf8e1f623d64dc563a6ea5a0d41bcf29a638f5b147e146f5a673e9f089f60519fd3f0fe86a6471cab0f64d1a786085afd8210c7c32adc1bda9adda411321b8720c7849beb1", 0xba}, {&(0x7f0000000300)="ad978b429b1fd13e11986dda2055f453682bd23f750ca58b879bf97060f72db59f271b389656d19d2d9d0a7af8aadfff35fa71f7ddf1559d41ea6bf2f7dc80be6d54ef0a83cb8be9cd990d36a250135d9f2255621240ca63c6dd6b81fbd6504713ff6b2a17e173e1610e9ace", 0x6c}, {&(0x7f0000000380)="47d882454c179353d5d4d16984c12fb1e4d4749701ef320657c2db5b0930f3ac727c28d1a0384e5415f85d6b45811c829ec9fab5aab2b47cc47b586518abe7830ecd7db0c980835b4a7fd60f6115b3b1c6666e3d6fbda4dc4c3df52f4650f9da95b606fd1a6def3f7b950f2c32c0e51d5f08662de21e08c6aa2024b6772c4257d519c039e607fffce785f3e8e6156e57641521b2b92ed84cbd41415dbe0080fcf6c56c4aef9e7178398e88b29568bb396acc7ee6a7af27fbef85b4689f0d3f7e98c58ea35598", 0xc6}, {&(0x7f0000000580)="4f47d14d99206e3e98a15a32090f17cde34c825a81a52d842e6eaaf1f7b10a6405485a38b1d686fcd150410abc3d1f4a683f95f71cd1dc7e393b2353ffca033aba5b806b338616a9bbf21c5230544cfb3a0d5049124e630efa7eaabee94b6d67f5dcba13b66fda045a36a2c161aa23c2207f4e44a99173a422295ccf402eaf14e26888d74fa56d6910531e62330a2a5260134fdf1ee29d20be100347f8c5d8a95f5ef99197460305a38192207b47ff201c1f2f6c571c68493c5fa9d794b7d7151f6ea7b2a617ffea99fcfa1202cc7ab8a800fa", 0xd3}], 0x6, &(0x7f0000000680)=[{0xb0, 0x108, 0x797f, "23ddd637646a0d1e0a6e9b1f718439f977aeb0e0ddb66f709db441f92f949cd3047f0a2f8f12a91cb61e5a07f45bc303fb5bdd17ec72e26e53c18224452c0a349ac511da1cb9b04511c8ef1bfc73237b8da62aee28a390b71661c9a6e561aff6ee49867ba55573baa9d16831d8c4d6791513864ba42ceafa4386f28de6a5ff4825930dd063e9882e8975353b0003125d64cacd7927af99b5022c"}, {0xa0, 0x101, 0x7ff, "5373b1b30f11237c36e43115ed45eb56a035f586e0fe24ca98110fd0c772955611f37aff1d9b85ba682a8444b97f2e7422ca6ecf5cf87e8864b189d9bb3144f10a5b8c107b526d848752992925cc674ac67b955e16f98eb76110408a976629678b8fc84596d1227ba6f493fd738d3d62847a0e49e9302f9db6fade940eb8460b988d78635e611de50cc9155b54"}, {0x10, 0x110, 0x3}, {0x100, 0x10a, 0xff, "20eadbfb7d966baee0f56a1ba9710eeb0e0ac1955bdbcdca24093d0ee88ace21415485b3bd52a97303dda7803ae7a7eeaddc7fe8f4200c7fe3f721053c409c715eb465612bbfe199143bad0dcc769b3e91cf6db2b58c7f9901e59d9a46fe2d35f4ef53ec48cfafd6aea7d6c86a5ed8ef425a21d0b7bbc85cd7d82b7167a1721d6736828a24a6e6c68f431cfd7df19363d42202ec577ccf69bf0cbd393e6d4242ab786d9e71742367168a9d32ea67d870c34f8637b0827b32097916e7071b84216bae1472fe994d48daf1da8eece54c7e8cbfbba18067bfd541a5f0a650ba5040ad88212a83723c74b099469082f4"}, {0xc8, 0x6, 0x81, "1094e7d178213c224b6f3dc0a3e602571831dc06e1ad38e76571599490f9664105aba641d73852999a89daf2acef45cbfed10c5b170b83c5cf93fca783d911b9d7861448a0edf9456af74b52822a65efc0376091648b3a57658214319fdc7656141f608c69d5dcbde1b452344fe53cedf0513102d5759b9d3e0a764a4e5385b6320d8f7b5645fe8d9a00e3080a23aad89561df4aed7d661242e764c85f5e6fa2b3b681cf10806233160c47ac52aad2bf8dab8c56"}], 0x328}, 0x20000001) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:17:31 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="046f005502ed2e3fd91c7bc12a7b3435e973b11fb5592ade7f0578b88c9ad5052df22724e7d4b322c7d9f971d1652bbce3731a9a0de33db9a864397fdf8e8c335d16aa3626e85b3b619d19deb7ad3ee6", 0x50}, {&(0x7f0000000240)="7aefc172d46e0b87f0d9640f5621845f611a957bfb981ded2f7237fa86e50286a0b16989a7f6169379d0bdcdea6ef8a9950a890834cc1221046151f60a2b0dca8b2261d90fe1a18a1f40255b822cdc5742aab299cf4e754e83fb2eeabc92c3e23ad81bc47abbc07a07a4f2bb9163c506b071af1bbbdf8e1f623d64dc563a6ea5a0d41bcf29a638f5b147e146f5a673e9f089f60519fd3f0fe86a6471cab0f64d1a786085afd8210c7c32adc1bda9adda411321b8720c7849beb1", 0xba}, {&(0x7f0000000300)="ad978b429b1fd13e11986dda2055f453682bd23f750ca58b879bf97060f72db59f271b389656d19d2d9d0a7af8aadfff35fa71f7ddf1559d41ea6bf2f7dc80be6d54ef0a83cb8be9cd990d36a250135d9f2255621240ca63c6dd6b81fbd6504713ff6b2a17e173e1610e9ace", 0x6c}, {&(0x7f0000000380)="47d882454c179353d5d4d16984c12fb1e4d4749701ef320657c2db5b0930f3ac727c28d1a0384e5415f85d6b45811c829ec9fab5aab2b47cc47b586518abe7830ecd7db0c980835b4a7fd60f6115b3b1c6666e3d6fbda4dc4c3df52f4650f9da95b606fd1a6def3f7b950f2c32c0e51d5f08662de21e08c6aa2024b6772c4257d519c039e607fffce785f3e8e6156e57641521b2b92ed84cbd41415dbe0080fcf6c56c4aef9e7178398e88b29568bb396acc7ee6a7af27fbef85b4689f0d3f7e98c58ea35598", 0xc6}, {&(0x7f0000000580)="4f47d14d99206e3e98a15a32090f17cde34c825a81a52d842e6eaaf1f7b10a6405485a38b1d686fcd150410abc3d1f4a683f95f71cd1dc7e393b2353ffca033aba5b806b338616a9bbf21c5230544cfb3a0d5049124e630efa7eaabee94b6d67f5dcba13b66fda045a36a2c161aa23c2207f4e44a99173a422295ccf402eaf14e26888d74fa56d6910531e62330a2a5260134fdf1ee29d20be100347f8c5d8a95f5ef99197460305a38192207b47ff201c1f2f6c571c68493c5fa9d794b7d7151f6ea7b2a617ffea99fcfa1202cc7ab8a800fa", 0xd3}], 0x6, &(0x7f0000000680)=[{0xb0, 0x108, 0x797f, "23ddd637646a0d1e0a6e9b1f718439f977aeb0e0ddb66f709db441f92f949cd3047f0a2f8f12a91cb61e5a07f45bc303fb5bdd17ec72e26e53c18224452c0a349ac511da1cb9b04511c8ef1bfc73237b8da62aee28a390b71661c9a6e561aff6ee49867ba55573baa9d16831d8c4d6791513864ba42ceafa4386f28de6a5ff4825930dd063e9882e8975353b0003125d64cacd7927af99b5022c"}, {0xa0, 0x101, 0x7ff, "5373b1b30f11237c36e43115ed45eb56a035f586e0fe24ca98110fd0c772955611f37aff1d9b85ba682a8444b97f2e7422ca6ecf5cf87e8864b189d9bb3144f10a5b8c107b526d848752992925cc674ac67b955e16f98eb76110408a976629678b8fc84596d1227ba6f493fd738d3d62847a0e49e9302f9db6fade940eb8460b988d78635e611de50cc9155b54"}, {0x110, 0x110, 0x3, "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"}, {0x100, 0x10a, 0xff, "20eadbfb7d966baee0f56a1ba9710eeb0e0ac1955bdbcdca24093d0ee88ace21415485b3bd52a97303dda7803ae7a7eeaddc7fe8f4200c7fe3f721053c409c715eb465612bbfe199143bad0dcc769b3e91cf6db2b58c7f9901e59d9a46fe2d35f4ef53ec48cfafd6aea7d6c86a5ed8ef425a21d0b7bbc85cd7d82b7167a1721d6736828a24a6e6c68f431cfd7df19363d42202ec577ccf69bf0cbd393e6d4242ab786d9e71742367168a9d32ea67d870c34f8637b0827b32097916e7071b84216bae1472fe994d48daf1da8eece54c7e8cbfbba18067bfd541a5f0a650ba5040ad88212a83723c74b099469082f4"}, {0xc8, 0x6, 0x81, "1094e7d178213c224b6f3dc0a3e602571831dc06e1ad38e76571599490f9664105aba641d73852999a89daf2acef45cbfed10c5b170b83c5cf93fca783d911b9d7861448a0edf9456af74b52822a65efc0376091648b3a57658214319fdc7656141f608c69d5dcbde1b452344fe53cedf0513102d5759b9d3e0a764a4e5385b6320d8f7b5645fe8d9a00e3080a23aad89561df4aed7d661242e764c85f5e6fa2b3b681cf10806233160c47ac52aad2bf8dab8c56"}], 0x428}, 0x20000001) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:17:31 executing program 1: r0 = socket(0x1f, 0x5, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000340)=""/220, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e22, @remote}}) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20101, 0x0) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000680)=ANY=[]) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) delete_module(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5677ec7d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000580)={0x10, 0xffffffffffffffda, 0x800000000000}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000065974067959455aba8fc5e9fb7518d947e631ac274818c2ec4c20ecd3fe385cff57513e0a56dcd4ccb6077426354c2de4e4aa655c44f45007110a32709d49e0e39869113f2635ba6d6d643ad2e7ea0e997fb", @ANYRES16, @ANYPTR], 0x3}, 0x1, 0x0, 0x0, 0xc000800}, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000200), 0x4) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:17:31 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:31 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:31 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:31 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 149.568332][ T8660] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended 18:17:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f0000000300)="ad978b429b1fd13e11986dda2055f453682bd23f750ca58b879bf97060f72db59f271b389656d19d2d9d0a7af8aadfff35fa71f7ddf1559d41ea6bf2f7dc80be6d54ef0a83cb8be9cd990d36a250135d9f2255621240ca63c6dd6b81fbd6504713ff6b2a17e173e1610e9ace", 0x6c}, {&(0x7f0000000380)="47d882454c179353d5d4d16984c12fb1e4d4749701ef320657c2db5b0930f3ac727c28d1a0384e5415f85d6b45811c829ec9fab5aab2b47cc47b586518abe7830ecd7db0c980835b4a7fd60f6115b3b1c6666e3d6fbda4dc4c3df52f4650f9da95b606fd1a6def3f7b950f2c32c0e51d5f08662de21e08c6aa2024b6772c4257d519c039e607fffce785f3e8e6156e57641521b2b92ed84cbd41415dbe0080fcf6c56c4aef9e7178398e88b29568bb396acc7ee6a7af27fbef85b4689f0d3f7e98c58ea35598", 0xc6}, {&(0x7f0000000580)="4f47d14d99206e3e98a15a32090f17cde34c825a81a52d842e6eaaf1f7b10a6405485a38b1d686fcd150410abc3d1f4a683f95f71cd1dc7e393b2353ffca033aba5b806b338616a9bbf21c5230544cfb3a0d5049124e630efa7eaabee94b6d67f5dcba13b66fda045a36a2c161aa23c2207f4e44a99173a422295ccf402eaf14e26888d74fa56d6910531e62330a2a5260134fdf1ee29d20be100347f8c5d8a95f5ef99197460305a38192207b47ff201c1f2f6c571c68493c5fa9d794b7d7151f6ea7b2a617ffea99fcfa1202", 0xcd}], 0x5, &(0x7f0000000680)=[{0xa8, 0x0, 0x797f, "23ddd637646a0d1e0a6e9b1f718439f977aeb0e0ddb66f709db441f92f949cd3047f0a2f8f12a91cb61e5a07f45bc303fb5bdd17ec72e26e53c18224452c0a349ac511da1cb9b04511c8ef1bfc73237b8da62aee28a390b71661c9a6e561aff6ee49867ba55573baa9d16831d8c4d6791513864ba42ceafa4386f28de6a5ff4825930dd063e9882e8975353b0003125d64"}, {0x78, 0x101, 0x7ff, "5373b1b30f11237c36e43115ed45eb56a035f586e0fe24ca98110fd0c772955611f37aff1d9b85ba682a8444b97f2e7422ca6ecf5cf87e8864b189d9bb3144f10a5b8c107b526d848752992925cc674ac67b955e16f98eb76110408a976629678b8fc84596d1227b"}, {0x10, 0x110, 0x3}, {0x100, 0x10a, 0xff, "20eadbfb7d966baee0f56a1ba9710eeb0e0ac1955bdbcdca24093d0ee88ace21415485b3bd52a97303dda7803ae7a7eeaddc7fe8f4200c7fe3f721053c409c715eb465612bbfe199143bad0dcc769b3e91cf6db2b58c7f9901e59d9a46fe2d35f4ef53ec48cfafd6aea7d6c86a5ed8ef425a21d0b7bbc85cd7d82b7167a1721d6736828a24a6e6c68f431cfd7df19363d42202ec577ccf69bf0cbd393e6d4242ab786d9e71742367168a9d32ea67d870c34f8637b0827b32097916e7071b84216bae1472fe994d48daf1da8eece54c7e8cbfbba18067bfd541a5f0a650ba5040ad88212a83723c74b099469082f4"}], 0x230}, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:17:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) [ 149.797329][ T8660] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 149.836344][ T8660] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:17:32 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) 18:17:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x4000000000, 0x2, &(0x7f0000002280)=[{&(0x7f0000000100)="800000003804000019000300e60100006c00fec9000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000000140)="fcba5820c3ef1b77e8a23dd18b16961616356dd7fdeb89769b12def3b6cfd1ab4505524f78c1aa2bf4de120e650f04d278edd8006ad9f89c8b6d8ed96e63d878ff15074525d84e21090fcf500adea45e5683baf409b890f14dec72b7819a765b1f523b740006fa097ad63376050c8f865b5ffbd88b998d1665f951439c15e32429223f310ee8e4d1652b156fd2a1b1c7deec970e41e7a4", 0x97, 0x6}], 0x4801, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 149.862820][ T8660] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 149.878616][ T8660] EXT4-fs (loop5): no journal found 18:17:32 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:32 executing program 4: r0 = socket(0x1f, 0x5, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x301, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x6}, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000340)=""/220, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000300)={'gretap0\x00', {0x2, 0x4e22, @remote}}) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20101, 0x0) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000680)=ANY=[]) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) delete_module(0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x5677ec7d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540)='nl80211\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000580)={0x10, 0xffffffffffffffda, 0x800000000000}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c00000065974067959455aba8fc5e9fb7518d947e631ac274818c2ec4c20ecd3fe385cff57513e0a56dcd4ccb6077426354c2de4e4aa655c44f45007110a32709d49e0e39869113f2635ba6d6d643ad2e7ea0e997fb", @ANYRES16, @ANYPTR], 0x3}, 0x1, 0x0, 0x0, 0xc000800}, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000200), 0x4) clone(0xd48d24434713bd52, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:17:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) [ 150.036565][ T8686] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem 18:17:32 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 150.206794][ T8686] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:17:32 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 150.285953][ T8686] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.352312][ T8703] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.365779][ T8686] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 150.388206][ T8703] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 150.398573][ T8703] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.408956][ T8703] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 150.419474][ T8703] EXT4-fs (loop5): no journal found 18:17:32 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:32 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 150.454297][ T8686] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue 18:17:32 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 150.741988][ T8720] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.781057][ T8720] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 150.791030][ T8720] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 150.803776][ T8720] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 150.814849][ T8720] EXT4-fs (loop5): no journal found 18:17:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000100)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)}, {0x0}, {&(0x7f0000000300)="ad978b429b1fd13e11986dda2055f453682bd23f750ca58b879bf97060f72db59f271b389656d19d2d9d0a7af8aadfff35fa71f7ddf1559d41ea6bf2f7dc80be6d54ef0a83cb8be9cd990d36a250135d9f2255621240ca63c6dd6b81fbd6504713ff6b2a17e173e1610e9ace", 0x6c}, {&(0x7f0000000380)="47d882454c179353d5d4d16984c12fb1e4d4749701ef320657c2db5b0930f3ac727c28d1a0384e5415f85d6b45811c829ec9fab5aab2b47cc47b586518abe7830ecd7db0c980835b4a7fd60f6115b3b1c6666e3d6fbda4dc4c3df52f4650f9da95b606fd1a6def3f7b950f2c32c0e51d5f08662de21e08c6aa2024b6772c4257d519c039e607fffce785f3e8e6156e57641521b2b92ed84cbd41415dbe0080fcf6c56c4aef9e7178398e88b29568bb396acc7ee6a7af27fbef85b4689f0d3f7e98c58ea35598", 0xc6}, {&(0x7f0000000580)="4f47d14d99206e3e98a15a32090f17cde34c825a81a52d842e6eaaf1f7b10a6405485a38b1d686fcd150410abc3d1f4a683f95f71cd1dc7e393b2353ffca033aba5b806b338616a9bbf21c5230544cfb3a0d5049124e630efa7eaabee94b6d67f5dcba13b66fda045a36a2c161aa23c2207f4e44a99173a422295ccf402eaf14e26888d74fa56d6910531e62330a2a5260134fdf1ee29d20be100347f8c5d8a95f5ef99197460305a38192207b47ff201c1f2f6c571c68493c5fa9d794b7d7151f6ea7b2a617ffea99fcfa1202", 0xcd}], 0x5, &(0x7f0000000680)=[{0xa8, 0x0, 0x797f, "23ddd637646a0d1e0a6e9b1f718439f977aeb0e0ddb66f709db441f92f949cd3047f0a2f8f12a91cb61e5a07f45bc303fb5bdd17ec72e26e53c18224452c0a349ac511da1cb9b04511c8ef1bfc73237b8da62aee28a390b71661c9a6e561aff6ee49867ba55573baa9d16831d8c4d6791513864ba42ceafa4386f28de6a5ff4825930dd063e9882e8975353b0003125d64"}, {0x78, 0x101, 0x7ff, "5373b1b30f11237c36e43115ed45eb56a035f586e0fe24ca98110fd0c772955611f37aff1d9b85ba682a8444b97f2e7422ca6ecf5cf87e8864b189d9bb3144f10a5b8c107b526d848752992925cc674ac67b955e16f98eb76110408a976629678b8fc84596d1227b"}, {0x10, 0x110, 0x3}, {0x100, 0x10a, 0xff, "20eadbfb7d966baee0f56a1ba9710eeb0e0ac1955bdbcdca24093d0ee88ace21415485b3bd52a97303dda7803ae7a7eeaddc7fe8f4200c7fe3f721053c409c715eb465612bbfe199143bad0dcc769b3e91cf6db2b58c7f9901e59d9a46fe2d35f4ef53ec48cfafd6aea7d6c86a5ed8ef425a21d0b7bbc85cd7d82b7167a1721d6736828a24a6e6c68f431cfd7df19363d42202ec577ccf69bf0cbd393e6d4242ab786d9e71742367168a9d32ea67d870c34f8637b0827b32097916e7071b84216bae1472fe994d48daf1da8eece54c7e8cbfbba18067bfd541a5f0a650ba5040ad88212a83723c74b099469082f4"}], 0x230}, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 18:17:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 18:17:33 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:33 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0x22000, 0x0) pipe(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp6\x00') syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setitimer(0x2, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 18:17:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)) 18:17:33 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 151.054712][ T8736] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 151.079569][ T8736] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:17:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$TIOCGPGRP(r1, 0x540f, 0x0) [ 151.100280][ T8736] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:17:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) [ 151.128662][ T8736] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 151.158039][ T8736] EXT4-fs (loop5): no journal found 18:17:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)='\x00\x00\x00\x00', 0x4) 18:17:33 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:33 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 151.462119][ T8773] syz-executor.1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 18:17:34 executing program 2: socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:34 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x7fff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, [], 0x0, 0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0xffffffff}, 0x10}, 0x78) close(r1) 18:17:34 executing program 1: openat$vcsa(0xffffffffffffff9c, 0x0, 0x22000, 0x0) pipe(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x8040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/tcp6\x00') syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) setitimer(0x2, 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 151.858454][ T8803] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 151.938614][ T8803] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 151.989899][ T8803] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 152.007977][ T8803] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 152.047695][ T8803] EXT4-fs (loop5): get root inode failed [ 152.106213][ T8803] EXT4-fs (loop5): mount failed 18:17:34 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x0, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:34 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 18:17:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)) 18:17:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:17:34 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)) 18:17:34 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 18:17:34 executing program 1: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:17:34 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) [ 152.562151][ T8848] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 152.670859][ T8848] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 152.731545][ T8848] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:17:35 executing program 3: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8200000d, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 18:17:35 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='+', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) [ 152.775308][ T8848] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 152.832175][ T8848] EXT4-fs (loop5): get root inode failed [ 152.858013][ T8848] EXT4-fs (loop5): mount failed 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 18:17:35 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 18:17:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @remote}, 0x1) 18:17:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x80000000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) write$binfmt_aout(r3, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b010500a1030000ba0200000900000072020000b09d00000000000000000000717017626d4fdcb86660002a2e8486cd54df0b24f88e90df1a4f2bdc009766ce455e4e1c159c9b9c24a42d27fbf8b939d8c32f0662b5544350231246eb56b19133b29c540c0e8b754f455493326fb16f26f649bd777bea6036a8b1b28372f1c2de7987b03d91c3d3d438842a42ffb03a05cb515caf00d1cfcce60996ebe5c34bebb4497c3aa26fb9e1979487ae3b3be28d3b8bc677a710a2004b1786c712cb6c478b395a8533962d6ea6814bc2235cf8e58c7bb0fe0e7f95b3b03a59183503a7463d9a556ea5c2069f0a2ab97553ec865650f8142a69daa2856dc3dcc9545f682b3d0328fc7d0735af25f1fe114dc0382e22a39df1d47d70687f3e376c75acad9b7d6ceb8c590790903fd501f2735e85ea7ee7199658fa46578a19c2fb99246dc5014d2410fe669b1c60784956e2e5de22921df1d1cbe50840cf69e9c4bcf87917ca40a3bec5eb79fa793e3bd403bcecc9a8409e19db6996a6749a3a8fb001c1abb42a52b4db112fe92b4fd82baec68b2a44d9630735780a56f99b1f2911d3c089a93ae4471c34829e42ef8fc17c01eed647ba1f510da8fca424060aa217134e6c4c0f50af4a0ac306ccdfdd73430cc179fc0c3757a847c250853d143c3b9cd6f5b640430d0162f4845b37108c5653d0e3d3a33b7bfeecc50a15f90ed91cff84ba6b1fda551b38b6e62ead73f9cf317f679c79aade95868ff576438dd85cf91c50da00d7e7257ca356e4ac116e1357c5d9ebb18b691e3f7a94b418ea8d8ef6a7b0abce63b0329f7878636d26171b7b1de55e429cccc3337069f90ccbad597dcd94e3cd2afcbceae44229e5b4c2127448f903cdbf152b2ad7d671592ff961d42d5ce00badeef593d0f6a79ec9bf157e56a0b6d922e144bb2b7f15074f6f917d0bea7960eeffa2d29dae84219617e24bab83b8af9c9a9c6085a6b088dae6730e34a0729cc62ddc83f742f8b7397954873a45b60a86cc9aab406cb77e624f6505ea3a00ac49c91a7b1bfbd5af8014ed76a1a14612f044dfd12edb8df122f54fa13f842c4fdedeebb7cd5c9e9ca84a15ff8cc04631978166be3802fdb47485c43c790ba0f6ffdd74c2f43677c206b13554dea8cb8bfee666ba3054913ec54771bb9d0374401f302b24de84be6e8e3e79154df7a8c0f9cd8bd525e53c3f377a7783a65be8863e1ad3f9e2965bf71e196e92acf03880bfff7a2c5263806052296fc00fc665ee59191cbcba16ac734ca257e6bfac43f9a105e93bea5a0f699a63e3834458eedae92147dfd78bf85f5e3254709f9d076b31bae5ab126c176ee5520f5c6276c45c6e6285155bfee5eb5cdda25fd7dde111b5a297722a6bdc3347e97b1532ef6f09be61ddc9956cbb90aa1115f0302e1463b37f4124d21496f4d992e7adff4bdc2b5a0c78627070ca1db39ff73d78873e4ca1eb86e75cf262a83ec05d646bd9cf97e0e28b2ac404e1db28b89186b57617d84da72437137a738cff424d0b4a94e90f9900485b3e8b8ba2ca1b9b419e70a6b0bc1d1df12ff47dcd47ab3dfdd0b8178215150541bb5393af3906acf6eb43d49264d4a063ef59dae9d07a128ae387f01068e47c1d83360f92cf65813599fa77f058785896506f2f9700db99fe976a7ba7aad4a561b44ec83581b5de0168a29a8aa6ad55b849d098c30db8b02204836a3267eea4c9ed3b52cb31f8c6585565438371998d5deccc5814e4beb2d0bcb8e98effaa356768d10aa6f25d68d2b6e8c892ea031d0949aa730bff3b8f20dbaa8f03635651ded357352d0cbcdd9331b8fb78c5f66cfd0920f9a50326ad2cdeea2305797d6e7e2a54a99b22924798aa22e455647a8ecc967c83442a8dbd7cc0b62260a268234032e82af4a0ecb8efac90a7d95378d27737cc7dae9819bddbc5cbc0848ea7d5eb4dcd9026175cabcabe17eaaf047cd33e43b9080734fd4326018c39d470d9969599661be09a05cff133ae12eef6cf9fac711574d5da40201e380d3b9621849c371a0fddbdd579f0e7f6402a747435a9cb47f08effb0f839855c5129d9a47aa6374ea5c8b7dc7b4a5d123d032a32e11af72c6e9ca4f5a0b8d61ebb549d9c8d564773983fa5b73ca4717d00b18a94e8e620ea6b14f01bc2783aa509d5e1ad2aa4c3b1b432e2f495410ad13d54ab2ebde215c0bd4901634bebc51b7f1c183f09f61569db4b0cc8fcee0c5682a686840abffcd8a711f098e90687f1859ea879871a2ba3b742442338510c2e55407eeeaad51ad6e0e48df555c9dc0386889ab83a88bb02e6ccda42e802e9314d9057356204176170158f31ddaf76cfe675c117a48eaecb9190a69842259430c0c684f89c1965877b9410aa100df21a22e71119851cbeabef3e2ade38fdb73ff07682bf8fdfbdf8b43f75cc2b98dc25691377c1a00dc240897977641fdaa0c7065def25c831e38ead45dd9590288e9831ef052de4024d6b0faeff9e2e3c006b0a76d552d195acac15f524a6b7a2303f80513b3cdbf8a75b5e3a499a6f8aaebc5be8d74a4fc52e6a5f09ea2cc42d04178aed77b0b228157caf6212ee9f9eb6f71346746ea54c7a860368a8f8945503f1143477423df34efb83dd785869f4ad7a4fee705e624fad15a6d44b8eceac5c0c69e561599839d87e2d31c2604d8bf6e9bf631bcc71360181f953cae362e1a7ed57fabc3520850a91dfdf93b986874b99622d0d6b3988e31246205d3c14c669bfbe7e4345afbf7a07f09fd543923a029307dbd6bdaa2df61224c1b562abb5ab5058ae51478b50644c9f892ac29abcbef482140000000000000006b7bb1e27e1d4c54984f1b20105536744da77fbac09289e01e038dcf7f1433aae5b71b3a311dbac2b950e600c2bcd30b22d3fb6946006b97138317c066c1c910705908bfd8a5eb5956d339b799ed3e4054139d18ce4e192d44a89edb653475eca5a3f5c3c42ab97cc1d922af9ea161459b01c91d4faba2db9a6f543ee7de2e469fe3ad1a49ab74f309b9a032501614889c8e0cfd97e996115141f3cadfa95c72e950e4b13a67505d8a325c2869fddcc051bc7d26e372a94de7fc7f51c5eb2a3cf787dc00e79d1370ba79485642b9b548b44958e21f4beff3c6ced1ac9965aeb7d952a0c6f3e881ba19411466530dddfff039e6494e6f9e0b0e3b44ca3b2d4622ebb0772108ca569432b82c487564e5864f5fae0b258a29b4942200a178981e878efeb84eec72b0faf1b66559ba3e181658d936e6be302512eeb25ee1e04e00ca67e58d893bac91a3032d83f3f47f696086c256a2bc490bca4ba35657e084c18c19bd2625f2516d098022f8c3a2162f65d68897c5da74d226d1eee28d6a5ff0c390067bec1147a0b68f582edea4adc1d2e046dc57f61f59f277aeb5f318f606b32b58d0dd4f00887d8c6c648512aaaf8da1d35ad020ab9bc794748723c0da24575feb01cd5604b5f0b21bcba4318e28f1b28e2726d88c8bfa76a09e43279d16fa0191242ea2e5ea360960527f247c38baedee2b50258feec376d054748e62a30a9e3667f0b813ef49de50439563592b4f5e8418fbdaaefd377ae640aa89a9d6fb5a00ac149711620de8ef2e0841e7920bebc81258681cf06e66cc5934caec7a237c838491abb3bb0a3767675526aa4693768181597873cdef8660b63fc0605524ec38a4d4c008ada40966c376ad27091f338977f6b88c318b0d0df267e7d5c1052ce1c2c8d385378b77c7efb53a4d6b13978b6fc1fc7cdec449a71895a07dce423be906b4fde168a0d5a1565fe057366ad6c871af2b683ddd262b37c9b99887452197a71efaea285d90c71415c5322fcf5918f84168f8d04050064ab3826fc4b8e55fa870c24d8f95b426d2fe694c25b3880e9ecc0849074b780d2b222880ff221bd2af55b785ed6905c308ce625b32f4c70b5d4b636151c7464db209808d8612c72a84f088ee1fa7a0c34c83643ee28b34b2f2bb60871538ccca8bb77df0af7b5e8c8f1640f9d709af7b32bc4298dc7a6d52ccd30139bec9457c21a2827ccd3253fda29a13cf17f097b2b92ba4b5f694748a33da5ee9cd31d61a084c1ebbbe880debd85479798723317267ac95fffc29ee63d880f8f8a8264dd6b9c0034b17d2f925049b6e9e1fe1e1ddab0d0509de4514829bb30e09abb4543bf946d4b1d35017fcfe64008871bdf01eeee9efd8fe6dddb96d7193dd110a4c73447e75b605bfc5d4f5199919bf6f987ee4ff615442a50fc1b79e801c4ff7446a29fbe4700f411c68ebedcc90c683a7ec823ddcc81e910566a2d001535d81dd8cf6d9a896a282dfc8d8a340295213d311f1e387a98f38a0ee516d8d14e896484f1664208b38f42c68d195a14abd2ea91f49b033b6ab8d6989ecb4962fcd4dea03efc11ee5a36aa0c55384f6e0839d29891194fbadbc2bb66ce98d3900f682e6d86d32c57ba140a510aecafbc0e7b620f4125a23a0c7aa402044307169d7edff8aa72289101378bd62f57434b402df8db52bd07a49de8e547a7e7d1f3c7da652a81d6b7d6a3eba8db9576bcbabbdb51b27b2a67dddc116e98ff3a6f042038ebbf286d6cfb0ee1b4f90823106db5898d22c288ebbe0d99d4b2596f19677de0906b104856d2f967e9e0676a58ff8cd15a8aaba1a432aead6198e180745fa6decaeefa63bd6541d3038ac85adca29b0ee48e1a2bc0bc8560b9bd81a41ac2079a22a2dd584535c627498495f13ab0caa9ccd1b3d7fb0463ec0f2bb24e9eea886352bc441724122e8c76008df944a8388c310f2c2521c51ea6a760e00c6e648b7c9dadb92922281c073563b6d727b48a8a756336bc161b806e60397dc0f420109b470bcbb904ad32c2626df36853a487387693246f9bb658a70cb7a35f6bdf37d584bbf57be5d477c327c0704824c272d05590bc3b22163feb344b193b64588ed83cf2363c1623c55def2b1e46d10776544f1239f2cc6cbdacc8f28218b39bef1966f8bfc3bc9d3b3c2c25fc1058fb659cfd6a1be199f3b74ab0129c984af3bbd2141a1f19ecc167af2d307f2189fb7a86e0b9dc98604c4b1eaf9962e197adb33fd619d60287201881bd090e1a36b6b8002210f1d381895f172364fe7ef3ffaf3ff06e70721ffbf974b39ee98e17ab53c3e21ae021e3a5fc3ee3e02e8e0f79805665017cc7ae8ced4ca234eb150e0486c9aebdcbf2a4bb1ca7161a7a8ea8753eef0e66c979c4c9aac234ed53d8d5a0f3fa2d3ba6cff46f65085a00393cca4f7966d9b48f355df5ec03b361f0f2ce7419096d15d54535c096332af65944d8342ba13edb63e993dd2b4a3d3e38c8f873d3f0e87e18d977229d6a5ff46f255d6f86564dfa846283cea34883f749c663f4c8e8f4b9b5c6675a852184d30dcd031fd5cbc67f41d2b83cde5f264688595206ce0d85904486f6c9d3d6482c6bee25aa336645082749936f2e0017b8bd734e4d36406298a1c2c194baec3416782782b496496c325947a666f049f88bcf567d7fd009c99c0f14a4cda95b0c941f5eeebd891eb1dc7e9d872579ffc9ab3a0a31aa8765e5802c3d8333eca60924d805d8159ea86b8b1511286be3652cab0bb43f731e0ac0c23ec57d28b6baeee63bf2c35e0446b67153cbe222fcdb09e8fa7de503dcab7506d9b1fb7b9c9463946e5f575af1b6b7273ff86d52c8cb97e0cd80f963bea00475987a04134b8b83bbff2de9080f1bfbb4381c86a9e400d8525cc2c9e4a8fcea71692018dc76b0002757b5a59bc94da4ea349b9adf1dade1f51c319076f02a5c83bb64e9f72813ab3f81edb2e1de0bffbccc5aaabc26c20167733df59cff83787ffaf30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00"/4499], 0x1193) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x503, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3ff, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xff, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x565, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) [ 153.186690][ T8894] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 153.207395][ T8894] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 153.218952][ T8894] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 153.275432][ T8894] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 153.291794][ T8894] EXT4-fs (loop5): get root inode failed [ 153.297822][ T8894] EXT4-fs (loop5): mount failed 18:17:35 executing program 4: r0 = timerfd_create(0x9, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 18:17:35 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) 18:17:35 executing program 5: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:35 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8200000d, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0), 0x0) 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 18:17:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x4}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000002c0)) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) 18:17:35 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:17:35 executing program 1: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="5020905a7a9d0f9a222ee7b44bea654c5d354fd0f4bb1ae989b2980d92378e41f34dd20188d19b60c6b09fd49ee649a6f384c1e4a51d0fb6f3f621e1c86c842fd5001d3db2a998e8747d0629bb30d39377dae53a5c7ca4651e69fe23d19e4f5389abd58d124535602efdce155564bb77ca4698d46eb136ce144e3e8e580e69ea5269495c6b69e80e623812d58049cba08c43", 0x92}, {&(0x7f0000000280)="7e4a5952fc2c12319fb69385a55aaae2e9852d1b3c3c7e0f5f4219591e55e6d89f299550d328763cfbaab05d1fb31928d522cd12ae0da9d631a9d68c0c3097c897c237ec200623b07f0f40e4051aa3bd01b31fa20325da8d64eadff15c62775eecae43420a48ab4fa0f7b6205181941ae1c8dbc2971fd33584b0ad9b7383", 0x7e}, {&(0x7f0000000000)="7fb950d9276cf06a5e8f99e111e11808f296babc2474", 0x16}, {&(0x7f0000000300)="472a2f9378d4dbae4fec5094e2dacca30f563b", 0x13}, {&(0x7f0000000340)="0a569c1ab3cc34c165923452e6e6c32f10eac073c3335838b73a41c2ba14a8f0e6cf6268cde5c2d342a6d114f55faf5da1b44a715944a57757aa950cb1951c9ecab5c4351a74dc7dcf32dcd40cd403afda2acffa983b898d278104ae19e518fc3c79c8651fd1ef4d5f5cd760d77274247e73b37da0cc41e87a0f2aa5b4", 0x7d}, {&(0x7f00000003c0)="49b08ce1bcd5a4e63af6e6b8a869e696ba64d1828215d65c8d68fc361783222e243b23c256508ab1a9aae41c9daaafca66dbd6ff4a00bc1f65e028a092e43ecce7c90a16020ae38aabfb0a26e08c10d4423d43e1a80cd1a163767c73499828c0de3340dc47cb3d3eeb6ab98e2e1d76159a47d29bce0e0d1090e43ac9b5a6bb8ffa39519cf117299d98ca7025073449150f42e4dd0e009f3549372d9418978697cef733676747f43cddd449f8b5b13589b85254913ece030086eb3eba897265d919d187dee83329dfd4d34ffb2b1b944070690518bec649", 0xd7}, {&(0x7f0000002480)}], 0x7}, 0x0) socket$inet(0x2, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000100)={0x0, 0x989680}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000001) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x6d) write$UHID_INPUT(r0, &(0x7f0000001440), 0xfffffc41) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x8, 0x80000001}, 0x0, 0x0, 0x522d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlockall(0x1) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) socketpair(0x0, 0x0, 0x7, 0x0) syz_genetlink_get_family_id$tipc2(0x0) socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0) 18:17:35 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod(&(0x7f0000000380)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x2082, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) dup2(r3, r2) 18:17:35 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) [ 153.555754][ T8929] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.595704][ T8929] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:35 executing program 5: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:36 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 18:17:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0xfffffffe) 18:17:36 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 18:17:36 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x1002c}]) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x3fe00) [ 154.147517][ T8964] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.271396][ T8964] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)='0', 0x1}, {&(0x7f0000000540)='\"', 0x1}], 0x2, 0x0) 18:17:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioprio_set$pid(0x2, 0x0, 0x2006) 18:17:36 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 18:17:36 executing program 5: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) [ 154.682949][ T8984] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.788249][ T8984] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:38 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="a401000024000705000800"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736662002c00030028000100000000000000000000000000000000003f000000010000000500000081000000020000004c0108001c000100055c00805e5e0000010000008e0a0000fbffffff0200000008000200810000001c0001000afff3f501030000010000000004000000000000040000000c0001000900090009e63dfdfd2fae547d4669000100fc03ff7f00000000010000001800020000008100070001f5c106060004000000000000000000000100000008000200030000001c000100080200000000000005000000d9a9563448293071008b038163efee73ff7f000007000000010000ca094cd3e8abddfaf10008000200460000001c00010040090100298200000000000000100000040000000a000000d6bea820e27018000200ffff920a13f700003f000633295c8ba07eb6388f505f330001040000ff0101011c000100010305000200000000000000000000009ab5cd24040000000c000200a9070100ff0005001c000100093fff0f070000000100000002000000030000000100000008000200ff010000000000000000000000000000000000000000000000000000000009cde81c6a6345c94f9044"], 0x1a4}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 18:17:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept(r0, &(0x7f0000000140)=@hci, &(0x7f0000000000)=0x80) sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 18:17:38 executing program 0: bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001740)=""/102400}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 18:17:38 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) 18:17:38 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) 18:17:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:38 executing program 0: sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2}, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, 0x0, 0x0) gettid() r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 18:17:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005f00)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@mcast1}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x60, 0x2, {{'cbc(des3_ede)\x00'}, 0xc0, "8a6042e48859d57da92f868d02677be7cd7bfdc9018db9fa"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xbe}]}, 0x158}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) [ 156.228633][ T9013] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.251621][ T9013] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 156.266368][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:17:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:38 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100488, 0x0) 18:17:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000280)={0x0, r1+10000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) 18:17:38 executing program 4: 18:17:38 executing program 4: [ 156.491889][ T9040] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.516254][ T9040] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:38 executing program 2: 18:17:38 executing program 0: 18:17:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:38 executing program 0: 18:17:38 executing program 2: 18:17:38 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 156.752651][ T9065] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.780725][ T9065] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:39 executing program 1: 18:17:39 executing program 2: 18:17:39 executing program 0: 18:17:39 executing program 3: 18:17:39 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:39 executing program 1: 18:17:39 executing program 2: 18:17:39 executing program 0: 18:17:39 executing program 1: [ 157.459187][ T9102] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended 18:17:39 executing program 3: 18:17:39 executing program 1: 18:17:39 executing program 0: 18:17:39 executing program 2: [ 157.501359][ T9102] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:39 executing program 1: 18:17:39 executing program 0: 18:17:39 executing program 3: 18:17:39 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:39 executing program 2: 18:17:40 executing program 0: 18:17:40 executing program 1: 18:17:40 executing program 3: 18:17:40 executing program 2: 18:17:40 executing program 3: 18:17:40 executing program 0: [ 157.864214][ T9122] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended 18:17:40 executing program 1: 18:17:40 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 157.965566][ T9122] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:40 executing program 3: 18:17:40 executing program 2: 18:17:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:40 executing program 0: 18:17:40 executing program 1: 18:17:40 executing program 3: 18:17:40 executing program 0: 18:17:40 executing program 2: 18:17:40 executing program 1: 18:17:40 executing program 3: 18:17:40 executing program 0: 18:17:40 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:40 executing program 2: 18:17:40 executing program 2: [ 158.295955][ T9151] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.368841][ T9151] EXT4-fs (loop5): bad geometry: block count 1080 exceeds size of device (1 blocks) 18:17:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:40 executing program 2: 18:17:40 executing program 1: 18:17:40 executing program 3: 18:17:40 executing program 0: 18:17:40 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:40 executing program 1: 18:17:40 executing program 3: 18:17:40 executing program 2: 18:17:40 executing program 0: 18:17:40 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:40 executing program 3: [ 158.634390][ T9176] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.695577][ T9176] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 158.740278][ T9176] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 158.755743][ T9176] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 158.766294][ T9176] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 18:17:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:41 executing program 2: 18:17:41 executing program 1: 18:17:41 executing program 0: 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:41 executing program 3: 18:17:41 executing program 3: 18:17:41 executing program 0: 18:17:41 executing program 2: 18:17:41 executing program 1: [ 158.909056][ T9198] overlayfs: failed to resolve './file0': -2 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:41 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8940, &(0x7f0000000040)=0x2) [ 159.022537][ T9200] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.051189][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 159.078465][ T9211] overlayfs: failed to resolve './file0': -2 [ 159.115603][ T9200] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 159.126321][ T9200] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 159.137160][ T9200] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 159.148023][ T9200] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 18:17:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:41 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x39, 0x2, 0x0, 0x0, 0x0, 0x0, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43400) 18:17:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000400)=""/4080, 0x1000}, {&(0x7f0000001740)=""/190, 0xffffff81}, {&(0x7f0000000080)=""/115, 0x73}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="160000001a0081aee4050c00000f00fe078bc36f1600", 0x16}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000040)='\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x2) 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:41 executing program 3: r0 = inotify_init1(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000940)) [ 159.268438][ T9225] overlayfs: failed to resolve './file0': -2 [ 159.330842][ T9226] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.354836][ T9226] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:17:41 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0xcc1b719a7a4a2369, 0x0) fallocate(r0, 0x0, 0x0, 0x6) 18:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x1c) 18:17:41 executing program 2: madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) [ 159.381942][ T9226] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:17:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$tmpfs(0x0, &(0x7f0000000200)='\x00', 0x0, 0x0, &(0x7f0000000540), 0xa000, &(0x7f00000005c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x25]}}, {@nr_blocks={'nr_blocks'}}, {@size={'size', 0x3d, [0x0, 0x0, 0x36, 0x0]}}, {@huge_always={'huge=always', 0x3d, '%vboxnet1]'}}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}) [ 159.428809][ T9226] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 159.443344][ T9226] EXT4-fs (loop5): failed to open journal device unknown-block(0,0) -6 18:17:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5412, &(0x7f0000000080)=0x1c) 18:17:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0xe4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0xe4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000060c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in=@loopback}}, 0xe4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000020000000000000000000000c42f8791c303d5d54467473b0bc6df6a8684863616"], 0x10}}, 0x0) 18:17:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth0_virt_wifi\x00'}) 18:17:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x8) llistxattr(0x0, &(0x7f0000000240)=""/76, 0x4c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 18:17:41 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:42 executing program 4: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 159.707013][ T9270] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 159.717041][ T9270] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 159.734740][ T9270] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:17:42 executing program 4: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 159.813291][ T9280] overlayfs: failed to resolve './file1': -2 [ 159.836156][ T9270] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated 18:17:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x80fe) 18:17:42 executing program 3: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) 18:17:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) [ 159.904929][ T9270] EXT4-fs (loop5): get root inode failed [ 159.960648][ T9270] EXT4-fs (loop5): mount failed 18:17:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x13, 0x0}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) [ 160.013322][ T9286] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.028237][ T9285] overlayfs: failed to resolve './file1': -2 [ 160.125595][ T9286] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (29) 18:17:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:42 executing program 4: mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:42 executing program 1: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$chown(0x4, r1, 0x0, 0xffffffffffffffff) 18:17:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) [ 160.358837][ T9302] overlayfs: failed to resolve './file1': -2 [ 160.441594][ T9301] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 160.485996][ T9301] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 160.497238][ T9301] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 160.524252][ T9301] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 160.546508][ T9301] EXT4-fs (loop5): get root inode failed [ 160.565925][ T9301] EXT4-fs (loop5): mount failed 18:17:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00'}, {@in6=@empty, 0x0, 0x32}, @in=@empty=0xa000000, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 18:17:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0) 18:17:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000080)=0x1d, 0x3) 18:17:42 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000000)="0f79b900000f320f06baf80c66b8402d748666efbafc0c66eddfc00f01c9da6d08660f3a0e840000842ff4", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:17:42 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) [ 160.651966][ T9321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:17:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0xb], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) [ 160.714105][ T9326] overlayfs: failed to resolve './file1': -2 18:17:43 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:43 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe10, 0x0, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 18:17:43 executing program 3: 18:17:43 executing program 0: [ 160.844612][ T9340] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 160.855000][ T9340] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 160.866423][ T9340] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 160.878207][ T9340] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated 18:17:43 executing program 1: 18:17:43 executing program 0: [ 160.916026][ T9340] EXT4-fs (loop5): get root inode failed [ 160.922427][ T9340] EXT4-fs (loop5): mount failed [ 160.975759][ T9355] overlayfs: failed to resolve './file1': -2 18:17:43 executing program 2: 18:17:43 executing program 4: mkdir(0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:43 executing program 3: 18:17:43 executing program 1: 18:17:43 executing program 0: 18:17:43 executing program 1: 18:17:43 executing program 2: 18:17:43 executing program 3: [ 161.143614][ T9366] overlayfs: failed to resolve './file1': -2 18:17:43 executing program 0: 18:17:43 executing program 2: 18:17:43 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:43 executing program 0: 18:17:43 executing program 3: [ 161.257463][ T9368] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 161.335232][ T9368] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 161.345541][ T9368] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 161.356972][ T9368] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 161.370468][ T9368] EXT4-fs (loop5): get root inode failed [ 161.383002][ T9368] EXT4-fs (loop5): mount failed 18:17:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:43 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:43 executing program 1: 18:17:43 executing program 3: 18:17:43 executing program 0: 18:17:43 executing program 2: 18:17:43 executing program 3: 18:17:43 executing program 0: 18:17:43 executing program 2: 18:17:43 executing program 1: 18:17:43 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:43 executing program 0: [ 161.708124][ T9393] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 161.739541][ T9393] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 161.826357][ T9393] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 161.849835][ T9393] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated [ 161.865112][ T9393] EXT4-fs (loop5): get root inode failed [ 161.877941][ T9393] EXT4-fs (loop5): mount failed 18:17:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 18:17:44 executing program 3: 18:17:44 executing program 2: 18:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:44 executing program 1: 18:17:44 executing program 0: 18:17:44 executing program 1: 18:17:44 executing program 2: 18:17:44 executing program 0: [ 162.072469][ T9416] overlayfs: failed to resolve './file0': -2 [ 162.094972][ T9417] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:17:44 executing program 1: 18:17:44 executing program 3: [ 162.129863][ T9417] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 162.140423][ T9417] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 162.154041][ T9417] EXT4-fs error (device loop5): ext4_fill_super:4569: inode #2: comm syz-executor.5: iget: root inode unallocated 18:17:44 executing program 0: [ 162.177701][ T9417] EXT4-fs (loop5): get root inode failed [ 162.186534][ T9417] EXT4-fs (loop5): mount failed 18:17:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:44 executing program 0: 18:17:44 executing program 3: 18:17:44 executing program 2: 18:17:44 executing program 1: 18:17:44 executing program 3: 18:17:44 executing program 1: [ 162.335403][ T9434] overlayfs: failed to resolve './file0': -2 18:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:44 executing program 0: 18:17:44 executing program 3: 18:17:44 executing program 2: 18:17:44 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:44 executing program 2: 18:17:44 executing program 1: 18:17:44 executing program 0: [ 162.476495][ T9445] overlayfs: failed to resolve './file0': -2 18:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:44 executing program 3: 18:17:44 executing program 2: 18:17:44 executing program 1: 18:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:44 executing program 3: 18:17:44 executing program 0: 18:17:44 executing program 1: 18:17:45 executing program 3: 18:17:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:45 executing program 2: 18:17:45 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:45 executing program 0: 18:17:45 executing program 2: 18:17:45 executing program 1: 18:17:45 executing program 0: 18:17:45 executing program 3: 18:17:45 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:45 executing program 1: 18:17:45 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x55, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000000b06010000d4000000000000000000100c00078008000940000fe8000900020073797a30000000000500010006"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x90001, 0x0) 18:17:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r4, r3, 0x0, 0x100000001) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000100)={0x8, 'bond_slave_0\x00', {'veth0_to_hsr\x00'}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "aef2b24c4f20635b", "cde7553a83bda6ced89282d00647e27c", "cfdca76e", "953392c3d1946819"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) 18:17:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:45 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x30}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000000011905000000000000000000000000240001001400010008000100ac1414aa08000200e00000000c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200000000000800070000000000100005"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfd53) splice(r0, 0x0, r2, 0x0, 0x33100000, 0x0) 18:17:45 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 163.048428][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:17:45 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x3, r2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) [ 163.119772][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.148281][ T27] audit: type=1804 audit(1586888265.402:2): pid=9494 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir999565830/syzkaller.fz9Xt4/52/cgroup.controllers" dev="sda1" ino=15891 res=1 [ 163.174123][ T9507] bridge: RTM_NEWNEIGH with invalid state 0x0 18:17:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0xfe41) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "fe83038335d25338", "e40621467d98643f3c259bccdd4c8cb809432a388a90aa7d19da66b1008cf9cf", "29e140b1", "69da2fc71746a2f5"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 18:17:45 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000280)="080db5055e0bcfe847a071") r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) 18:17:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0x900}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 163.360984][ T9524] overlayfs: missing 'lowerdir' [ 163.487100][ T9537] input: syz1 as /devices/virtual/input/input7 18:17:46 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) pipe(&(0x7f00000004c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 18:17:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x1efff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000140)="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"/297, 0x3accf8d5) ptrace(0x4206, r2) tkill(r2, 0x800000009) 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4803, 0x0) 18:17:46 executing program 1: r0 = io_uring_setup(0xf5, &(0x7f0000000580)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfff) close(r0) 18:17:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0x8ff}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 163.884276][ T9559] overlayfs: missing 'lowerdir' 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:46 executing program 1: r0 = io_uring_setup(0xf5, &(0x7f0000000580)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfff) close(r0) [ 163.916370][ T9565] input: syz1 as /devices/virtual/input/input9 18:17:46 executing program 3: r0 = io_uring_setup(0xf5, &(0x7f0000000580)={0x0, 0x0, 0x3, 0x0, 0x34a}) close(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:17:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x4803, 0x0) [ 164.019036][ T9561] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (1024 blocks) [ 164.056610][ T9592] input: syz1 as /devices/virtual/input/input10 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 164.066807][ T9598] overlayfs: missing 'lowerdir' 18:17:46 executing program 1: r0 = io_uring_setup(0xf5, &(0x7f0000000580)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xfff) close(r0) [ 164.182773][ T9612] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 164.264658][ T9633] overlayfs: missing 'lowerdir' [ 164.285576][ T9632] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 164.306830][ T9632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 18:17:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='loginuid\x00') sendfile(r0, r0, 0x0, 0x808) 18:17:46 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x2000000}) ioctl$UI_DEV_CREATE(r0, 0x5501) 18:17:46 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0x900}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 18:17:46 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000ac0)='-B\xd5\xb1\xd0~\x7f0U\xe8\xa4\xee3\xc3\xfc(\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\x16\x1a\xfd\xe6\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x004\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00'/134, 0x0) write(r3, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa", 0x3c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) sendfile(r3, r3, &(0x7f0000000200)=0x100000000000800, 0xffc) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='Z\x00') 18:17:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x4803, 0x0) 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:46 executing program 2: r0 = io_uring_setup(0xf1, &(0x7f0000000580)={0x0, 0x0, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) pipe(0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r0) [ 164.400056][ T9645] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 164.415475][ T9646] input input12: cannot allocate more than FF_MAX_EFFECTS effects 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 164.446421][ T9650] overlayfs: missing 'lowerdir' [ 164.446676][ T9651] input: syz1 as /devices/virtual/input/input13 [ 164.507215][ T9647] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 164.538149][ T9664] input: syz1 as /devices/virtual/input/input14 [ 164.544787][ T9666] overlayfs: missing 'lowerdir' 18:17:46 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x4803, 0x0) 18:17:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x400000100002f, {0x0, 0x0, 0x5}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 18:17:46 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r0, 0x0, 0x808) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 18:17:47 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) [ 164.704788][ T9687] overlayfs: missing 'lowerdir' [ 164.718088][ T9689] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 164.734076][ T9690] input: syz1 as /devices/virtual/input/input15 18:17:47 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) umount2(&(0x7f0000000180)='./bus\x00', 0x0) 18:17:47 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002300)=[{{&(0x7f0000000440), 0x80, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/101, 0x65}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000001c40)=""/45, 0x2d}], 0x6}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000ac0)='-B\xd5\xb1\xd0~\x7f0U\xe8\xa4\xee3\xc3\xfc(\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\x16\x1a\xfd\xe6\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x004\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(\x00'/134, 0x0) write(r4, &(0x7f00000004c0)="3161d417452c8f6d46edb3b1077f2abaa85e3489c66107ab7d9aeb42aa515f23c9150bfd105fa1be4e0415cb2c2d4a1cdff5ab24d3676cc093ea0ffa364b", 0x3e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x0) sendfile(r4, r4, &(0x7f0000000200), 0xffc) r5 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0)}, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000180)='Z\x00') [ 164.758090][ T9698] overlayfs: missing 'lowerdir' [ 164.836448][ T9701] input: syz1 as /devices/virtual/input/input16 [ 164.872757][ T9710] overlayfs: missing 'lowerdir' 18:17:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x4803, 0x0) 18:17:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003cc0)=ANY=[@ANYBLOB="3800000010000507000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c00020008000200", @ANYRES32=r4, @ANYBLOB="b424daa4104198a3e5512a7dc39a9f2ca3e5b26792f2"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000001000000001000128008000100736974000c0002800800140000000002"], 0x38}}, 0x0) 18:17:47 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') writev(r0, &(0x7f0000000700)=[{&(0x7f0000000200)='m', 0x1}], 0x1) [ 165.321325][ T9734] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 165.346558][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.644054][ T0] NOHZ: local_softirq_pending 08 [ 309.266999][ T1141] INFO: task kworker/u4:5:259 blocked for more than 143 seconds. [ 309.274956][ T1141] Not tainted 5.7.0-rc1-syzkaller #0 [ 309.291289][ T1141] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 309.300684][ T1141] kworker/u4:5 D26624 259 2 0x80004000 [ 309.311757][ T1141] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 309.320605][ T1141] Call Trace: [ 309.323959][ T1141] ? __schedule+0x805/0xc90 [ 309.333666][ T1141] ? schedule+0x188/0x220 [ 309.338628][ T1141] ? schedule_timeout+0x43/0x250 [ 309.343639][ T1141] ? lockdep_hardirqs_on+0x4a4/0x8a0 [ 309.358676][ T1141] ? _raw_spin_unlock_irq+0x1f/0x80 [ 309.364067][ T1141] ? do_wait_for_common+0x232/0x370 [ 309.374458][ T1141] ? console_conditional_schedule+0x30/0x30 [ 309.381096][ T1141] ? wait_for_completion+0x43/0x50 [ 309.386542][ T1141] ? __synchronize_srcu+0x1ba/0x240 [ 309.397860][ T1141] ? rcu_read_lock_any_held+0x1a0/0x1a0 [ 309.403421][ T1141] ? fsnotify_mark_destroy_workfn+0xe7/0x2a0 [ 309.414859][ T1141] ? process_one_work+0x76e/0xfd0 [ 309.420568][ T1141] ? worker_thread+0xa7f/0x1450 [ 309.425580][ T1141] ? kthread+0x353/0x380 [ 309.435667][ T1141] ? rcu_lock_release+0x20/0x20 [ 309.441261][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 309.445931][ T1141] ? ret_from_fork+0x24/0x30 [ 309.455724][ T1141] [ 309.455724][ T1141] Showing all locks held in the system: [ 309.464215][ T1141] 2 locks held by kworker/u4:5/259: [ 309.474253][ T1141] #0: ffff8880aa434138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6df/0xfd0 [ 309.486091][ T1141] #1: ffffc90001317d80 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x71e/0xfd0 [ 309.501502][ T1141] 1 lock held by khungtaskd/1141: [ 309.506518][ T1141] #0: ffffffff892e8590 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 309.518189][ T1141] 1 lock held by in:imklog/6906: [ 309.523155][ T1141] #0: ffff8880921e9670 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x25d/0x2f0 [ 309.537994][ T1141] [ 309.540352][ T1141] ============================================= [ 309.540352][ T1141] [ 309.552671][ T1141] NMI backtrace for cpu 1 [ 309.557125][ T1141] CPU: 1 PID: 1141 Comm: khungtaskd Not tainted 5.7.0-rc1-syzkaller #0 [ 309.565402][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.575619][ T1141] Call Trace: [ 309.578994][ T1141] dump_stack+0x1e9/0x30e [ 309.583322][ T1141] nmi_cpu_backtrace+0x9f/0x180 [ 309.588217][ T1141] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 309.594263][ T1141] nmi_trigger_cpumask_backtrace+0x16a/0x280 [ 309.600284][ T1141] watchdog+0xd2a/0xd40 [ 309.604431][ T1141] kthread+0x353/0x380 [ 309.608496][ T1141] ? hungtask_pm_notify+0x50/0x50 [ 309.613527][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 309.618125][ T1141] ret_from_fork+0x24/0x30 [ 309.623393][ T1141] Sending NMI from CPU 1 to CPUs 0: [ 309.628952][ C0] NMI backtrace for cpu 0 [ 309.628956][ C0] CPU: 0 PID: 9681 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0 [ 309.628959][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.628962][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x22/0x50 [ 309.628968][ C0] Code: 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0c 25 40 1e 02 00 65 8b 15 68 bb 8e 7e f7 c2 00 01 1f 00 75 2c 8b 91 d8 13 00 00 <83> fa 02 75 21 48 8b 91 e0 13 00 00 48 8b 32 48 8d 7e 01 8b 89 dc [ 309.628970][ C0] RSP: 0018:ffffc90005337d80 EFLAGS: 00000246 [ 309.628975][ C0] RAX: ffffffff81d36e57 RBX: ffff88809c009110 RCX: ffff888047af60c0 [ 309.628978][ C0] RDX: 0000000000000002 RSI: 000000000003ffff RDI: 0000000000040000 [ 309.628981][ C0] RBP: ffff88809c009160 R08: dffffc0000000000 R09: ffffed1013801261 [ 309.628984][ C0] R10: ffffed1013801261 R11: 0000000000000000 R12: dffffc0000000000 [ 309.628987][ C0] R13: ffff88808dca0068 R14: 1ffff11013801222 R15: 1ffff1101380122c [ 309.628990][ C0] FS: 00007f15eaa60700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 309.628992][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.628995][ C0] CR2: 000000000217a9b8 CR3: 00000000a1ecd000 CR4: 00000000001406f0 [ 309.628998][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 309.629001][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 309.629003][ C0] Call Trace: [ 309.629005][ C0] io_ring_ctx_wait_and_kill+0xc7/0x7d0 [ 309.629007][ C0] ? io_uring_flush+0xbb0/0xbb0 [ 309.629009][ C0] io_uring_release+0x59/0x70 [ 309.629011][ C0] __fput+0x2ed/0x750 [ 309.629013][ C0] task_work_run+0x147/0x1d0 [ 309.629015][ C0] prepare_exit_to_usermode+0x48e/0x600 [ 309.629018][ C0] ? syscall_return_slowpath+0xf9/0x420 [ 309.629020][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 309.629022][ C0] RIP: 0033:0x45c889 [ 309.629028][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.629030][ C0] RSP: 002b:00007f15eaa5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 309.629035][ C0] RAX: 0000000000000000 RBX: 00007f15eaa606d4 RCX: 000000000045c889 [ 309.629038][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 309.629041][ C0] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 309.629044][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 309.629046][ C0] R13: 0000000000000078 R14: 00000000005043d2 R15: 000000000076bfac [ 309.658327][ T1141] Kernel panic - not syncing: hung_task: blocked tasks [ 309.888822][ T1141] CPU: 1 PID: 1141 Comm: khungtaskd Not tainted 5.7.0-rc1-syzkaller #0 [ 309.897046][ T1141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.907098][ T1141] Call Trace: [ 309.910388][ T1141] dump_stack+0x1e9/0x30e [ 309.914756][ T1141] panic+0x264/0x7a0 [ 309.918674][ T1141] ? nmi_trigger_cpumask_backtrace+0x206/0x280 [ 309.924831][ T1141] watchdog+0xd3d/0xd40 [ 309.928993][ T1141] kthread+0x353/0x380 [ 309.933049][ T1141] ? hungtask_pm_notify+0x50/0x50 [ 309.938228][ T1141] ? kthread_blkcg+0xd0/0xd0 [ 309.942797][ T1141] ret_from_fork+0x24/0x30 [ 309.948626][ T1141] Kernel Offset: disabled [ 309.952967][ T1141] Rebooting in 86400 seconds..