000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffffff144e0000ff000207835eebf116b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4e2540019ccbd9f6672837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 19:03:19 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000007000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:19 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1398.365111] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1398.411710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:03:19 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1398.539783] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1398.560707] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1398.569348] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1398.587190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1398.592768] ext4_test_bit(bit=127, block=4) = 0 [ 1398.623424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1398.629160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:03:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r0, 0x0, r1, 0x0, 0x7fffffff, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 19:03:19 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000219000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xf340, 0x40000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) r4 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r4, 0x0, r1) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000000)={0x81, 0x4, 0x81, 0x7a7c, 0x5, 0xb766, 0x8}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(r6, 0x0, r0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x103442, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000240)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$rose(0xb, 0x5, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r9, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000280)={0x5e, @empty, 0x4e21, 0x0, 'wrr\x00', 0x8, 0x7fff, 0x79}, 0x2c) 19:03:20 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1399.079492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1399.100500] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 1399.128498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1399.193546] EXT4-fs (loop4): bad geometry: block count 33555512 exceeds size of device (63488 blocks) 19:03:20 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000319000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:20 executing program 3: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1399.552269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:03:20 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b9900000003050001000600000008000640"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1399.690054] EXT4-fs (loop4): bad geometry: block count 50332728 exceeds size of device (63488 blocks) 19:03:21 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x8, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x6}) prctl$PR_SET_PDEATHSIG(0x1, 0x33) recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, 0x0, 0x709}, 0x14}}, 0x0) 19:03:21 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000419000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:21 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b9900000003050001000600000008000640"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1400.194134] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1400.295905] block nbd3: Receive control failed (result -107) [ 1400.302019] block nbd3: Receive control failed (result -107) [ 1400.315154] block nbd3: shutting down sockets 19:03:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1400.420614] EXT4-fs (loop4): bad geometry: block count 67109944 exceeds size of device (63488 blocks) [ 1400.468556] block nbd3: server does not support multiple connections per device. [ 1400.506709] block nbd3: shutting down sockets 19:03:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:21 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000519000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1400.699160] block nbd3: server does not support multiple connections per device. [ 1400.755314] block nbd3: shutting down sockets [ 1400.813209] netlink: 'syz-executor.1': attribute type 8 has an invalid length. 19:03:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b9900000003050001000600000008000640"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:21 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x9, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1400.916455] EXT4-fs (loop4): bad geometry: block count 83887160 exceeds size of device (63488 blocks) 19:03:22 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000619000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1400.994302] block nbd3: server does not support multiple connections per device. [ 1401.025831] block nbd3: shutting down sockets 19:03:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x200, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 19:03:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:22 executing program 5: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {0x9, 0xb}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1401.255763] block nbd3: server does not support multiple connections per device. [ 1401.320555] block nbd3: shutting down sockets 19:03:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$NBD_DO_IT(r2, 0xab03) [ 1401.343595] EXT4-fs (loop4): bad geometry: block count 100664376 exceeds size of device (63488 blocks) 19:03:22 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1401.495744] block nbd3: server does not support multiple connections per device. [ 1401.540439] block nbd3: shutting down sockets 19:03:22 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000719000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$NBD_DO_IT(r2, 0xab03) [ 1401.728310] block nbd3: server does not support multiple connections per device. [ 1401.762545] block nbd3: shutting down sockets 19:03:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:22 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0xa, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1401.926790] block nbd3: server does not support multiple connections per device. [ 1401.945047] EXT4-fs (loop4): bad geometry: block count 117441592 exceeds size of device (63488 blocks) [ 1401.951436] block nbd3: shutting down sockets 19:03:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:23 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:23 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) [ 1402.138133] block nbd3: server does not support multiple connections per device. [ 1402.232330] block nbd3: shutting down sockets 19:03:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1402.346068] EXT4-fs (loop4): bad geometry: block count 134218808 exceeds size of device (63488 blocks) [ 1402.427767] block nbd3: server does not support multiple connections per device. [ 1402.444633] IPVS: Error connecting to the multicast addr [ 1402.465028] block nbd3: shutting down sockets 19:03:24 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4$inet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, &(0x7f0000000080)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r9, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r10, 0x709}, 0x14}}, 0x0) 19:03:24 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:24 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000919000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:24 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0xb, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1403.068672] EXT4-fs (loop4): bad geometry: block count 150996024 exceeds size of device (63488 blocks) 19:03:24 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000a19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1403.120101] block nbd3: Receive control failed (result -107) [ 1403.189678] block nbd3: shutting down sockets 19:03:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:24 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x440000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000040)={0x8057}) fcntl$dupfd(r5, 0x0, r3) r8 = fcntl$dupfd(r5, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r9, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1403.379337] block nbd3: Receive control failed (result -107) [ 1403.386044] block nbd3: shutting down sockets 19:03:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:24 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c574"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1403.508719] EXT4-fs (loop4): bad geometry: block count 167773240 exceeds size of device (63488 blocks) [ 1403.530737] block nbd3: Receive control failed (result -107) [ 1403.538396] block nbd3: shutting down sockets [ 1403.740802] block nbd3: Receive control failed (result -107) [ 1403.748365] block nbd3: shutting down sockets 19:03:24 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b9900000003050001000600000008000640"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:24 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000b19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r9, 0x80000001, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000001c0)={r9, 0x1000, 0x105, "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"}, 0x10d) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r10, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0907000000001500000001040000"], 0x14}}, 0x0) 19:03:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:25 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c574"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1404.043537] block nbd3: Receive control failed (result -107) [ 1404.051735] block nbd3: shutting down sockets 19:03:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:25 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0xe, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(r2, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x672]}, &(0x7f0000000040), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r7, 0x709}, 0x14}}, 0x0) [ 1404.211453] EXT4-fs (loop4): bad geometry: block count 184550456 exceeds size of device (63488 blocks) [ 1404.310196] block nbd3: Receive control failed (result -107) [ 1404.340140] block nbd3: shutting down sockets 19:03:25 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000000)=0x8000000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x6c441, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000001d000)={0x14, r9, 0x10, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) [ 1404.643805] block nbd3: Receive control failed (result -107) [ 1404.651010] block nbd3: shutting down sockets 19:03:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1404.811371] block nbd3: Receive control failed (result -107) [ 1404.819682] block nbd3: shutting down sockets [ 1404.842106] EXT4-fs (loop4): bad geometry: block count 201327672 exceeds size of device (63488 blocks) 19:03:25 executing program 5: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c574"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:25 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c574"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:25 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x10, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:26 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000d19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1405.003366] block nbd3: Receive control failed (result -107) [ 1405.011404] block nbd3: shutting down sockets 19:03:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1405.236816] block nbd3: server does not support multiple connections per device. [ 1405.295612] block nbd3: shutting down sockets [ 1405.337048] EXT4-fs (loop4): bad geometry: block count 218104888 exceeds size of device (63488 blocks) 19:03:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:26 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000200)=ANY=[@ANYBLOB="142304002ae66d13f5ed7161503e178694b819f09a50dadbe264f25869e68a676e8204f7d8722cccbbf03233892088a798533f7181e09e26f3cb331691e05dece6e91a74c927056c109855287b3b12743039d7ed7096f441ba278e3c84c7e77b6b498fb4e9e258c6fff1b0085ba4c315bb0882cbd0035efc2b79133066bae9e2788ac9e80f65f80230071673b36d926995aba083686027dd80de218e8625f27a433705544538aa8716d51ef754314ca7d7e2fd014e3033cccd6b8f8c", @ANYRES16=r5, @ANYBLOB="09070000000000000000010019fee11afddae92b01960f6994a60000"], 0x14}}, 0x0) [ 1405.522817] block nbd3: server does not support multiple connections per device. 19:03:26 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000e19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1405.574836] block nbd3: shutting down sockets 19:03:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:26 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x38, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1405.705160] block nbd3: server does not support multiple connections per device. [ 1405.728135] block nbd3: shutting down sockets 19:03:26 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 19:03:26 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1405.882233] EXT4-fs (loop4): bad geometry: block count 234882104 exceeds size of device (63488 blocks) [ 1405.891897] block nbd3: shutting down sockets 19:03:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 19:03:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x0, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1406.015855] block nbd3: shutting down sockets 19:03:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1406.070797] FAULT_INJECTION: forcing a failure. [ 1406.070797] name failslab, interval 1, probability 0, space 0, times 0 19:03:27 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000f19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1406.191186] block nbd3: shutting down sockets [ 1406.250652] CPU: 1 PID: 30941 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1406.258597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.268005] Call Trace: [ 1406.270620] dump_stack+0x1fc/0x2fe [ 1406.274299] should_fail.cold+0xa/0x14 [ 1406.278213] ? setup_fault_attr+0x200/0x200 [ 1406.282698] __should_failslab+0x115/0x180 [ 1406.286971] should_failslab+0x5/0xf [ 1406.290727] kmem_cache_alloc_node+0x23f/0x3b0 [ 1406.295355] __alloc_skb+0xba/0x5b0 [ 1406.299010] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1406.304024] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1406.309243] pfkey_sendmsg+0x146/0x7e0 [ 1406.313163] ? dump_sp+0x490/0x490 [ 1406.316731] sock_sendmsg+0xc3/0x120 [ 1406.320464] ___sys_sendmsg+0x803/0x920 [ 1406.324480] ? copy_msghdr_from_user+0x410/0x410 [ 1406.329300] ? lock_downgrade+0x740/0x740 [ 1406.333465] ? lock_acquire+0x170/0x3c0 [ 1406.337457] ? check_preemption_disabled+0x41/0x280 [ 1406.342492] ? __fget+0x345/0x520 [ 1406.346010] ? ksys_dup3+0x3c0/0x3c0 [ 1406.349742] ? vfs_write+0x3d7/0x540 [ 1406.353474] ? __fget_light+0x1d1/0x230 [ 1406.357473] __sys_sendmsg+0xec/0x1b0 [ 1406.361307] ? __ia32_sys_shutdown+0x70/0x70 [ 1406.366788] ? vfs_write+0x393/0x540 [ 1406.370538] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1406.370556] ? trace_hardirqs_off_caller+0x69/0x210 [ 1406.370575] ? do_syscall_64+0x21/0x620 [ 1406.370601] do_syscall_64+0xf9/0x620 [ 1406.388142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1406.393354] RIP: 0033:0x45ca29 [ 1406.396566] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1406.415833] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1406.423575] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 [ 1406.423585] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1406.423595] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 19:03:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1406.423604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1406.423613] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 19:03:27 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) sched_setscheduler(r6, 0x0, &(0x7f0000000040)=0x47) 19:03:27 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) 19:03:27 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:27 executing program 5 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1406.607960] EXT4-fs (loop4): bad geometry: block count 251659320 exceeds size of device (63488 blocks) [ 1406.656132] block nbd3: Receive control failed (result -107) [ 1406.663322] block nbd3: shutting down sockets 19:03:27 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) 19:03:27 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x0, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1406.804964] FAULT_INJECTION: forcing a failure. [ 1406.804964] name failslab, interval 1, probability 0, space 0, times 0 19:03:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1406.910077] block nbd3: Receive control failed (result -107) [ 1406.930823] block nbd3: shutting down sockets [ 1406.949327] CPU: 1 PID: 30982 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1406.957261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.966631] Call Trace: [ 1406.969246] dump_stack+0x1fc/0x2fe [ 1406.972906] should_fail.cold+0xa/0x14 [ 1406.976814] ? setup_fault_attr+0x200/0x200 [ 1406.981196] __should_failslab+0x115/0x180 [ 1406.985450] should_failslab+0x5/0xf [ 1406.989180] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1406.994303] __kmalloc_node_track_caller+0x38/0x70 [ 1406.999257] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1407.003943] __alloc_skb+0xef/0x5b0 [ 1407.007586] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1407.012450] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1407.017660] pfkey_sendmsg+0x146/0x7e0 [ 1407.021567] ? dump_sp+0x490/0x490 [ 1407.025119] sock_sendmsg+0xc3/0x120 [ 1407.028850] ___sys_sendmsg+0x803/0x920 [ 1407.032847] ? copy_msghdr_from_user+0x410/0x410 [ 1407.037626] ? lock_downgrade+0x740/0x740 [ 1407.041788] ? lock_acquire+0x170/0x3c0 [ 1407.045787] ? check_preemption_disabled+0x41/0x280 [ 1407.050830] ? __fget+0x345/0x520 [ 1407.054335] ? ksys_dup3+0x3c0/0x3c0 [ 1407.058087] ? vfs_write+0x3d7/0x540 [ 1407.061826] ? __fget_light+0x1d1/0x230 [ 1407.065828] __sys_sendmsg+0xec/0x1b0 [ 1407.069647] ? __ia32_sys_shutdown+0x70/0x70 [ 1407.074065] ? vfs_write+0x393/0x540 [ 1407.077815] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1407.082591] ? trace_hardirqs_off_caller+0x69/0x210 [ 1407.087621] ? do_syscall_64+0x21/0x620 [ 1407.091634] do_syscall_64+0xf9/0x620 [ 1407.095455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1407.100678] RIP: 0033:0x45ca29 [ 1407.103901] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1407.122921] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.130774] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 [ 1407.138062] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1407.145348] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1407.152666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1407.159960] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 [ 1407.186330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=30995 comm=syz-executor.2 19:03:28 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$NBD_SET_SOCK(r0, 0xab00, r3) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) [ 1407.209318] EXT4-fs (loop4): bad geometry: block count 268436536 exceeds size of device (63488 blocks) 19:03:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r5) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000a00)="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", 0x1001, r6) keyctl$get_security(0x11, r6, &(0x7f0000000000)=""/44, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x14}}, 0x0) [ 1407.282003] block nbd3: Receive control failed (result -107) [ 1407.289010] block nbd3: shutting down sockets 19:03:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:28 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001119000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:28 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1407.469351] block nbd3: Receive control failed (result -107) [ 1407.495643] block nbd3: shutting down sockets [ 1407.593960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=31018 comm=syz-executor.2 [ 1407.620880] nla_parse: 3 callbacks suppressed [ 1407.620908] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:03:28 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:28 executing program 5 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) [ 1407.739128] EXT4-fs (loop4): bad geometry: block count 285213752 exceeds size of device (63488 blocks) [ 1407.761672] block nbd3: Receive control failed (result -107) [ 1407.770430] block nbd3: shutting down sockets 19:03:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 1407.810574] FAULT_INJECTION: forcing a failure. [ 1407.810574] name failslab, interval 1, probability 0, space 0, times 0 19:03:28 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001219000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) nanosleep(&(0x7f0000000000), &(0x7f0000000040)) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x5}, 0x8) [ 1407.990904] block nbd3: Receive control failed (result -107) [ 1407.998059] block nbd3: shutting down sockets [ 1408.046709] CPU: 0 PID: 31036 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1408.054643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.064026] Call Trace: [ 1408.066665] dump_stack+0x1fc/0x2fe [ 1408.070326] should_fail.cold+0xa/0x14 [ 1408.074233] ? setup_fault_attr+0x200/0x200 [ 1408.078589] __should_failslab+0x115/0x180 [ 1408.082839] should_failslab+0x5/0xf [ 1408.086565] kmem_cache_alloc+0x278/0x370 [ 1408.090731] skb_clone+0x151/0x3d0 [ 1408.094289] pfkey_process+0xba/0x7a0 [ 1408.098117] ? present_and_same_family.part.0+0xc0/0xc0 [ 1408.103742] ? __mutex_add_waiter+0x160/0x160 [ 1408.108298] ? lock_downgrade+0x740/0x740 [ 1408.112460] ? lock_acquire+0x170/0x3c0 [ 1408.116572] ? __might_fault+0xef/0x1d0 [ 1408.120567] ? iov_iter_advance+0x219/0xdd0 [ 1408.125041] ? copyin+0xa4/0xf0 [ 1408.128347] ? _copy_from_iter_full+0x234/0x7b0 [ 1408.133201] pfkey_sendmsg+0x414/0x7e0 [ 1408.137133] ? dump_sp+0x490/0x490 [ 1408.140698] sock_sendmsg+0xc3/0x120 [ 1408.144448] ___sys_sendmsg+0x803/0x920 [ 1408.148451] ? copy_msghdr_from_user+0x410/0x410 [ 1408.153439] ? lock_downgrade+0x740/0x740 [ 1408.157772] ? lock_acquire+0x170/0x3c0 [ 1408.161767] ? check_preemption_disabled+0x41/0x280 [ 1408.166946] ? __fget+0x345/0x520 [ 1408.170420] ? ksys_dup3+0x3c0/0x3c0 [ 1408.174158] ? vfs_write+0x3d7/0x540 [ 1408.177907] ? __fget_light+0x1d1/0x230 [ 1408.181968] __sys_sendmsg+0xec/0x1b0 [ 1408.185829] ? __ia32_sys_shutdown+0x70/0x70 [ 1408.190253] ? vfs_write+0x393/0x540 [ 1408.194015] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1408.198790] ? trace_hardirqs_off_caller+0x69/0x210 [ 1408.203833] ? do_syscall_64+0x21/0x620 [ 1408.207830] do_syscall_64+0xf9/0x620 [ 1408.211657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1408.216873] RIP: 0033:0x45ca29 [ 1408.220087] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1408.239121] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.246883] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 [ 1408.254201] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1408.261501] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1408.268777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1408.276056] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 19:03:29 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:29 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1408.354153] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 19:03:29 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:29 executing program 5 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdaa, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2202}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x9d7883, 0x0) mlockall(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fcntl$dupfd(r1, 0x0, r2) getsockname$inet6(r3, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') fsync(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') [ 1408.464843] EXT4-fs (loop4): bad geometry: block count 301990968 exceeds size of device (63488 blocks) [ 1408.532280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1543 sclass=netlink_route_socket pid=31066 comm=syz-executor.2 [ 1408.623540] IPVS: ftp: loaded support on port[0] = 21 [ 1408.696958] FAULT_INJECTION: forcing a failure. [ 1408.696958] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.719120] CPU: 1 PID: 31076 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1408.727059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1408.736434] Call Trace: [ 1408.739057] dump_stack+0x1fc/0x2fe [ 1408.742719] should_fail.cold+0xa/0x14 [ 1408.746636] ? setup_fault_attr+0x200/0x200 [ 1408.750996] __should_failslab+0x115/0x180 [ 1408.755252] should_failslab+0x5/0xf [ 1408.758995] kmem_cache_alloc_node+0x23f/0x3b0 [ 1408.763609] __alloc_skb+0xba/0x5b0 [ 1408.767261] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1408.772142] pfkey_sendmsg+0x453/0x7e0 [ 1408.776058] ? dump_sp+0x490/0x490 [ 1408.779626] sock_sendmsg+0xc3/0x120 [ 1408.783367] ___sys_sendmsg+0x803/0x920 [ 1408.784388] IPVS: ftp: loaded support on port[0] = 21 [ 1408.787360] ? copy_msghdr_from_user+0x410/0x410 [ 1408.787386] ? lock_downgrade+0x740/0x740 [ 1408.787397] ? lock_acquire+0x170/0x3c0 [ 1408.787419] ? check_preemption_disabled+0x41/0x280 [ 1408.810510] ? __fget+0x345/0x520 [ 1408.813994] ? ksys_dup3+0x3c0/0x3c0 [ 1408.817737] ? vfs_write+0x3d7/0x540 [ 1408.821480] ? __fget_light+0x1d1/0x230 [ 1408.825491] __sys_sendmsg+0xec/0x1b0 [ 1408.829325] ? __ia32_sys_shutdown+0x70/0x70 [ 1408.833756] ? vfs_write+0x393/0x540 [ 1408.837510] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1408.842412] ? trace_hardirqs_off_caller+0x69/0x210 [ 1408.847579] ? do_syscall_64+0x21/0x620 [ 1408.851586] do_syscall_64+0xf9/0x620 [ 1408.855421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1408.860632] RIP: 0033:0x45ca29 [ 1408.863839] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1408.882768] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.890490] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 19:03:30 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:30 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001319000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:30 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 1408.890499] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1408.890506] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1408.890514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1408.890523] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 19:03:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:30 executing program 5 (fault-call:1 fault-nth:4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924a17, 0x0) [ 1409.152502] EXT4-fs (loop4): bad geometry: block count 318768184 exceeds size of device (63488 blocks) 19:03:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r3, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r5, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="12000000", @ANYRES16=r6, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRESDEC=r7, @ANYBLOB="000428bd7000fedbdf250a00002004000a00440050800800030001ac0f00130004000976500190a7b2ebe7e1d55925207f00110001006e4930fb8597f8ac1a6d0205810000000500090000000000050009000200000004000a00"], 0x60}, 0x1, 0x0, 0x0, 0x2c000001}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r6, 0x20, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24010045}, 0x0) 19:03:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1409.282585] FAULT_INJECTION: forcing a failure. [ 1409.282585] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.294649] CPU: 1 PID: 31143 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1409.302770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.312179] Call Trace: [ 1409.314795] dump_stack+0x1fc/0x2fe [ 1409.318477] should_fail.cold+0xa/0x14 [ 1409.322384] ? setup_fault_attr+0x200/0x200 [ 1409.326740] __should_failslab+0x115/0x180 [ 1409.331004] should_failslab+0x5/0xf [ 1409.334758] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1409.339896] __kmalloc_node_track_caller+0x38/0x70 [ 1409.344849] __kmalloc_reserve.isra.0+0x39/0xe0 [ 1409.349542] __alloc_skb+0xef/0x5b0 [ 1409.353188] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1409.358157] pfkey_sendmsg+0x453/0x7e0 [ 1409.362071] ? dump_sp+0x490/0x490 [ 1409.365629] sock_sendmsg+0xc3/0x120 [ 1409.369355] ___sys_sendmsg+0x803/0x920 [ 1409.373345] ? copy_msghdr_from_user+0x410/0x410 [ 1409.378149] ? lock_downgrade+0x740/0x740 [ 1409.382314] ? lock_acquire+0x170/0x3c0 [ 1409.386303] ? check_preemption_disabled+0x41/0x280 [ 1409.391336] ? __fget+0x345/0x520 [ 1409.394806] ? ksys_dup3+0x3c0/0x3c0 [ 1409.398532] ? vfs_write+0x3d7/0x540 [ 1409.402259] ? __fget_light+0x1d1/0x230 [ 1409.406260] __sys_sendmsg+0xec/0x1b0 [ 1409.410082] ? __ia32_sys_shutdown+0x70/0x70 [ 1409.414591] ? vfs_write+0x393/0x540 [ 1409.418334] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1409.423114] ? trace_hardirqs_off_caller+0x69/0x210 [ 1409.428149] ? do_syscall_64+0x21/0x620 [ 1409.432184] do_syscall_64+0xf9/0x620 [ 1409.436001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1409.441202] RIP: 0033:0x45ca29 [ 1409.444493] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1409.463401] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.471135] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 19:03:30 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001419000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1409.478439] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1409.485761] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1409.493051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1409.500331] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 19:03:30 executing program 3: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) socket(0x10, 0x80002, 0xc) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924a17, 0x0) [ 1409.641018] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 19:03:30 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 19:03:30 executing program 5 (fault-call:1 fault-nth:5): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 1409.815689] EXT4-fs (loop4): bad geometry: block count 335545400 exceeds size of device (63488 blocks) 19:03:31 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001519000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1409.875686] block nbd3: Receive control failed (result -107) [ 1409.921227] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1409.996819] block nbd3: shutting down sockets [ 1409.999379] FAULT_INJECTION: forcing a failure. [ 1409.999379] name failslab, interval 1, probability 0, space 0, times 0 19:03:31 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, 0x0, 0x0, 0x0) [ 1410.078949] EXT4-fs (loop4): bad geometry: block count 352322616 exceeds size of device (63488 blocks) [ 1410.094907] CPU: 1 PID: 31188 Comm: syz-executor.5 Not tainted 4.19.124-syzkaller #0 [ 1410.102883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.112286] Call Trace: [ 1410.114897] dump_stack+0x1fc/0x2fe [ 1410.118542] should_fail.cold+0xa/0x14 [ 1410.122439] ? setup_fault_attr+0x200/0x200 [ 1410.126779] __should_failslab+0x115/0x180 [ 1410.131025] should_failslab+0x5/0xf [ 1410.134750] kmem_cache_alloc+0x278/0x370 [ 1410.138936] skb_clone+0x151/0x3d0 [ 1410.142489] pfkey_broadcast_one+0xb9/0x360 [ 1410.146859] pfkey_broadcast+0x3e6/0x650 [ 1410.150942] pfkey_sendmsg+0x6d0/0x7e0 [ 1410.154849] ? dump_sp+0x490/0x490 [ 1410.158437] sock_sendmsg+0xc3/0x120 [ 1410.162240] ___sys_sendmsg+0x803/0x920 [ 1410.166249] ? copy_msghdr_from_user+0x410/0x410 [ 1410.171038] ? lock_downgrade+0x740/0x740 [ 1410.175199] ? lock_acquire+0x170/0x3c0 [ 1410.179231] ? check_preemption_disabled+0x41/0x280 [ 1410.184551] ? __fget+0x345/0x520 [ 1410.188038] ? ksys_dup3+0x3c0/0x3c0 [ 1410.191790] ? vfs_write+0x3d7/0x540 [ 1410.195648] ? __fget_light+0x1d1/0x230 [ 1410.199653] __sys_sendmsg+0xec/0x1b0 [ 1410.203481] ? __ia32_sys_shutdown+0x70/0x70 [ 1410.207901] ? vfs_write+0x393/0x540 [ 1410.211646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1410.216539] ? trace_hardirqs_off_caller+0x69/0x210 [ 1410.221598] ? do_syscall_64+0x21/0x620 [ 1410.225611] do_syscall_64+0xf9/0x620 [ 1410.229447] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.234657] RIP: 0033:0x45ca29 [ 1410.237862] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1410.256782] RSP: 002b:00007f29ca21cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.264548] RAX: ffffffffffffffda RBX: 0000000000500dc0 RCX: 000000000045ca29 [ 1410.271853] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1410.279144] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1410.286442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1410.293729] R13: 00000000000009fe R14: 00000000004ccd65 R15: 00007f29ca21d6d4 19:03:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090700000000652299fba2b0641499aef30600000001040000008e738f965857de189497219b7d552764250111b2ee6c73278bb0e1cc759806e19bc96903055645e64779b864c287e5ba14b9dec4dccdcf6cc5a91d19d3620b79e586128d9b45bbe6eccaff805ad7f3e0e79a"], 0x14}}, 0x0) 19:03:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:31 executing program 2 (fault-call:2 fault-nth:0): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:03:31 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001619000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1410.651200] FAULT_INJECTION: forcing a failure. [ 1410.651200] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.756325] CPU: 1 PID: 31214 Comm: syz-executor.2 Not tainted 4.19.124-syzkaller #0 [ 1410.764270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.773660] Call Trace: [ 1410.776297] dump_stack+0x1fc/0x2fe [ 1410.779940] should_fail.cold+0xa/0x14 [ 1410.783872] ? setup_fault_attr+0x200/0x200 [ 1410.788209] __should_failslab+0x115/0x180 [ 1410.788225] should_failslab+0x5/0xf [ 1410.788243] kmem_cache_alloc_node+0x23f/0x3b0 [ 1410.788266] __alloc_skb+0xba/0x5b0 [ 1410.804537] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1410.809419] ? netlink_autobind.isra.0+0x217/0x300 [ 1410.814372] netlink_sendmsg+0xa2e/0xcc0 [ 1410.818452] ? nlmsg_notify+0x190/0x190 [ 1410.822438] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1410.827650] ? nlmsg_notify+0x190/0x190 [ 1410.831635] sock_sendmsg+0xc3/0x120 [ 1410.835389] ___sys_sendmsg+0x3e2/0x920 [ 1410.839385] ? copy_msghdr_from_user+0x410/0x410 [ 1410.844160] ? lock_downgrade+0x740/0x740 [ 1410.848333] ? lock_acquire+0x170/0x3c0 [ 1410.852352] ? check_preemption_disabled+0x41/0x280 [ 1410.857427] ? __fget+0x345/0x520 [ 1410.860906] ? ksys_dup3+0x3c0/0x3c0 [ 1410.864635] ? perf_trace_lock+0xeb/0x4c0 [ 1410.868788] ? get_pid_task+0xf4/0x190 [ 1410.872712] ? __fget_light+0x1d1/0x230 [ 1410.876705] __sys_sendmmsg+0x195/0x470 [ 1410.880720] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1410.885049] ? fsnotify+0x8ba/0xf00 [ 1410.888689] ? lock_downgrade+0x740/0x740 [ 1410.892864] ? __mutex_unlock_slowpath+0xea/0x670 [ 1410.897747] ? check_preemption_disabled+0x41/0x280 [ 1410.902796] ? wait_for_completion_io+0x10/0x10 [ 1410.907480] ? vfs_write+0x393/0x540 [ 1410.911213] ? ksys_write+0x1c8/0x2a0 [ 1410.915022] ? __ia32_sys_read+0xb0/0xb0 [ 1410.919094] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 1410.924123] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1410.928893] __x64_sys_sendmmsg+0x99/0x100 [ 1410.933138] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1410.937730] do_syscall_64+0xf9/0x620 [ 1410.942414] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.947629] RIP: 0033:0x45ca29 [ 1410.950854] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1410.969765] RSP: 002b:00007f0d415a7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1410.977630] RAX: ffffffffffffffda RBX: 00000000004fc5c0 RCX: 000000000045ca29 [ 1410.984923] RDX: 0000000004924a17 RSI: 0000000020000140 RDI: 0000000000000003 [ 1410.992208] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1410.999500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 19:03:32 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1411.006817] R13: 00000000000008de R14: 00000000004cba28 R15: 00007f0d415a86d4 [ 1411.067566] EXT4-fs (loop4): bad geometry: block count 369099832 exceeds size of device (63488 blocks) 19:03:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:32 executing program 5 (fault-call:1 fault-nth:6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:32 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001719000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRES16=r5, @ANYBLOB="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"], 0x14}}, 0x0) [ 1411.391781] block nbd3: Receive control failed (result -107) [ 1411.508218] block nbd3: shutting down sockets 19:03:32 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:32 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) [ 1411.534907] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 19:03:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1411.682392] EXT4-fs (loop4): bad geometry: block count 385877048 exceeds size of device (63488 blocks) 19:03:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:33 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:33 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:33 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x2) [ 1412.192681] EXT4-fs (loop4): bad geometry: block count 402654264 exceeds size of device (63488 blocks) [ 1412.247787] block nbd3: Receive control failed (result -107) [ 1412.254822] block nbd3: shutting down sockets 19:03:33 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:33 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001919000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) iopl(0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) [ 1412.450473] block nbd3: Receive control failed (result -107) [ 1412.460188] block nbd3: shutting down sockets [ 1412.560081] EXT4-fs (loop4): bad geometry: block count 419431480 exceeds size of device (63488 blocks) [ 1412.667166] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 19:03:34 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:34 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x14}}, 0x0) 19:03:34 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001a19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:34 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x3) 19:03:34 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x4) [ 1413.364709] block nbd3: Receive control failed (result -107) [ 1413.371605] block nbd3: shutting down sockets [ 1413.423064] EXT4-fs (loop4): bad geometry: block count 436208696 exceeds size of device (63488 blocks) 19:03:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x9, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$ \x00\x00', @ANYRES16=r5, @ANYBLOB="000429bd70000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) [ 1413.605397] block nbd3: Receive control failed (result -107) [ 1413.612478] block nbd3: shutting down sockets 19:03:34 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001b19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 1413.854923] block nbd3: Receive control failed (result -107) [ 1413.862665] block nbd3: shutting down sockets [ 1413.954287] EXT4-fs (loop4): bad geometry: block count 452985912 exceeds size of device (63488 blocks) [ 1414.131437] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1414.146048] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1414.177602] IPVS: Error connecting to the multicast addr 19:03:35 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r1, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:03:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x17, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:35 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:35 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x5) [ 1414.367253] block nbd3: Receive control failed (result -107) [ 1414.384111] block nbd3: shutting down sockets 19:03:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:35 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x6) 19:03:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) r5 = accept4$x25(r4, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) r6 = fcntl$dupfd(r5, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x33}, 0x1, 0x0, 0x0, 0x885}, 0x0) [ 1414.473300] EXT4-fs (loop4): bad geometry: block count 469763128 exceeds size of device (63488 blocks) 19:03:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x900, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1414.566272] block nbd3: Receive control failed (result -107) [ 1414.578967] block nbd3: shutting down sockets 19:03:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:35 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001d19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0907000800c8687ad93c2700ad7db2d2e69debe1c8192c34"], 0x14}}, 0x0) [ 1414.804069] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1414.881216] block nbd3: Receive control failed (result -107) [ 1414.888118] block nbd3: shutting down sockets [ 1414.943295] EXT4-fs (loop4): bad geometry: block count 486540344 exceeds size of device (63488 blocks) [ 1415.055012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1415.144368] IPVS: Error connecting to the multicast addr 19:03:36 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1700, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:36 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804001e19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:36 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x8) [ 1415.408279] block nbd3: Receive control failed (result -107) [ 1415.415428] block nbd3: shutting down sockets 19:03:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1415.553066] EXT4-fs (loop4): bad geometry: block count 503317560 exceeds size of device (63488 blocks) 19:03:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3f00, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1415.611119] block nbd3: Receive control failed (result -107) [ 1415.618497] block nbd3: shutting down sockets 19:03:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:36 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002119000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000100)=""/159) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x581280, 0x0) r5 = fcntl$dupfd(r1, 0x0, r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$RDS_GET_MR(r8, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f00000001c0)=""/137, 0x89}, &(0x7f0000000080), 0x38}, 0x20) r9 = fcntl$dupfd(r5, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400201) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{&(0x7f0000000300)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/76, 0x4c}], 0x3}, 0x2f}, {{&(0x7f0000001480)=@caif=@dgm, 0x80, &(0x7f0000001880), 0x0, &(0x7f0000001900)=""/4096, 0x1000}, 0x401}], 0x2, 0xec315e488957d873, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES16=r11, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1415.863897] block nbd3: Receive control failed (result -107) [ 1415.871145] block nbd3: shutting down sockets 19:03:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r5, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r6, 0x709}, 0x14}}, 0x0) 19:03:37 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x34000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1416.048111] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1416.055787] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1416.071880] IPVS: Error connecting to the multicast addr [ 1416.141100] block nbd3: Receive control failed (result -107) [ 1416.150011] block nbd3: shutting down sockets [ 1416.160000] EXT4-fs (loop4): bad geometry: block count 553649208 exceeds size of device (63488 blocks) 19:03:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB='\t\x00'/14], 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) geteuid() [ 1416.417197] block nbd3: Receive control failed (result -107) [ 1416.424309] block nbd3: shutting down sockets 19:03:37 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x9) 19:03:37 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002219000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x400300, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:37 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x1c}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1416.735807] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1416.743586] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1416.759327] IPVS: Error connecting to the multicast addr [ 1416.760415] block nbd3: Receive control failed (result -107) [ 1416.776186] block nbd3: shutting down sockets 19:03:37 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xa) 19:03:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1416.855969] EXT4-fs (loop4): bad geometry: block count 570426424 exceeds size of device (63488 blocks) 19:03:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:38 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002319000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1416.950948] block nbd3: Receive control failed (result -107) [ 1416.957630] block nbd3: shutting down sockets [ 1417.129276] block nbd3: Receive control failed (result -107) [ 1417.137342] block nbd3: shutting down sockets 19:03:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:38 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa00, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) [ 1417.265904] EXT4-fs (loop4): bad geometry: block count 587203640 exceeds size of device (63488 blocks) [ 1417.362771] block nbd3: Receive control failed (result -107) [ 1417.369677] block nbd3: shutting down sockets 19:03:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x2000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:38 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002419000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1417.485643] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1417.493627] IPVS: Error connecting to the multicast addr [ 1417.554730] block nbd3: Receive control failed (result -107) [ 1417.566139] block nbd3: shutting down sockets 19:03:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1417.632569] Unknown ioctl 1075359421 [ 1417.716913] block nbd3: server does not support multiple connections per device. [ 1417.776352] block nbd3: shutting down sockets [ 1417.979863] EXT4-fs (loop4): bad geometry: block count 603980856 exceeds size of device (63488 blocks) 19:03:39 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x38}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, r1) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r7, 0x709}, 0x14}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xfffffffffffffff7) r10 = fcntl$dupfd(r9, 0x0, r9) fcntl$dupfd(r10, 0x0, r8) ioctl$USBDEVFS_BULK(r10, 0xc0185502, &(0x7f0000000040)={{{0xb}}, 0x8a, 0x8, &(0x7f0000000100)="4df5e729757872b8e50fe0b4559f0a250d66f63c87d158f61d9871df698d27158348de50f21fe075c2b6a0e3db19fdf29ce7d77d88b665acf173e1e84f74fcec3103f1097db173778270ccabee3e86a4b4e16afc36b4d1373b1cbb6a8e1766094cfca19e99c91771489fac06c78050f3bccc8f8dc6018adbdcf9ec5b528e23c31525a95c2fd4359c4f1d"}) 19:03:39 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xb) 19:03:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x4000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:39 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002519000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:39 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe) [ 1418.236602] block nbd3: server does not support multiple connections per device. 19:03:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1418.363525] block nbd3: shutting down sockets 19:03:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x9000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1418.492585] EXT4-fs (loop4): bad geometry: block count 620758072 exceeds size of device (63488 blocks) [ 1418.563003] block nbd3: server does not support multiple connections per device. [ 1418.615160] block nbd3: shutting down sockets 19:03:39 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002619000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:39 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:39 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r1, 0x80000001, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r1, 0x3, 0x30}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20232, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x300000f) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x10000000002) fcntl$dupfd(r2, 0x406, r2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x74}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') 19:03:40 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x17000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1418.879989] block nbd3: server does not support multiple connections per device. [ 1418.898956] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1418.939636] block nbd3: shutting down sockets 19:03:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1419.089927] EXT4-fs (loop4): bad geometry: block count 637535288 exceeds size of device (63488 blocks) [ 1419.194476] block nbd3: server does not support multiple connections per device. [ 1419.280259] block nbd3: shutting down sockets 19:03:40 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002719000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3f000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1419.561277] block nbd3: server does not support multiple connections per device. [ 1419.611188] block nbd3: shutting down sockets [ 1419.729700] EXT4-fs (loop4): bad geometry: block count 654312504 exceeds size of device (63488 blocks) 19:03:40 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf) 19:03:40 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:41 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1419.972264] block nbd3: server does not support multiple connections per device. 19:03:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x80ffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1420.056765] block nbd3: shutting down sockets 19:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(r2, 0x0, r0) pipe(&(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x40400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r7, 0x709}, 0x14}}, 0x0) eventfd2(0x5, 0x1) [ 1420.235220] EXT4-fs (loop4): bad geometry: block count 671089720 exceeds size of device (63488 blocks) [ 1420.268819] block nbd3: server does not support multiple connections per device. [ 1420.281836] block nbd3: shutting down sockets 19:03:41 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:41 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x10) 19:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:41 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002919000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0xffffff7f, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:41 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r9, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r9, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000002c0)={0x64, r5, 0x200, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcc1, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x64}}, 0x0) [ 1420.738529] block nbd3: server does not support multiple connections per device. [ 1420.753550] block nbd3: shutting down sockets 19:03:41 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 1420.813796] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1420.903798] EXT4-fs (loop4): bad geometry: block count 687866936 exceeds size of device (63488 blocks) [ 1420.978318] block nbd3: server does not support multiple connections per device. 19:03:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0xffffff80, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:42 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002a19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1421.030787] block nbd3: shutting down sockets 19:03:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 1421.217813] block nbd3: server does not support multiple connections per device. [ 1421.280220] block nbd3: shutting down sockets 19:03:42 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1421.306565] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:03:42 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 1421.351873] EXT4-fs (loop4): bad geometry: block count 704644152 exceeds size of device (63488 blocks) 19:03:42 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002b19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1421.511244] block nbd3: server does not support multiple connections per device. [ 1421.540369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1421.550752] block nbd3: shutting down sockets [ 1421.762394] EXT4-fs (loop4): bad geometry: block count 721421368 exceeds size of device (63488 blocks) 19:03:43 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x60) 19:03:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x40030000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 19:03:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = fcntl$dupfd(r1, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090700000000000000000100000031d0aa2665e8b6ed1f770fb9edce00ed2e649f665deee8b7d78d0c0f71037a9f2aa750128d95b9bd591ebc3e28e767315cef3bf346134d0c8bb2f8cc2dc22a7cf06f42f75c1744c9c145e73fe7d32df1"], 0x14}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x5) setsockopt$inet_sctp6_SCTP_INITMSG(r12, 0x84, 0x2, &(0x7f0000000080)={0x9af5, 0x401, 0x1, 0x7ff}, 0x8) 19:03:43 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:43 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1422.034474] block nbd3: shutting down sockets 19:03:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1422.111248] EXT4-fs (loop4): bad geometry: block count 738198584 exceeds size of device (63488 blocks) 19:03:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x100000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:43 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002d19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1422.253507] block nbd3: shutting down sockets 19:03:43 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 1422.464641] block nbd3: shutting down sockets 19:03:43 executing program 3: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x200000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1422.585851] EXT4-fs (loop4): bad geometry: block count 754975800 exceeds size of device (63488 blocks) 19:03:43 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc0) 19:03:43 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002e19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709, 0x0, 0x25dfdbfd}, 0x14}}, 0x884) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0xac, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000100)=""/172}, &(0x7f0000000240)=0x78) 19:03:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1423.075062] EXT4-fs (loop4): bad geometry: block count 771753016 exceeds size of device (63488 blocks) 19:03:44 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:44 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804002f19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005540)={'ip6gretap0\x00', r5}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000005640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005600)={&(0x7f0000005580)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x16e}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x14}}, 0x0) 19:03:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x900000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0907ffffffdf0000000001000000"], 0x14}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000000)={{0x1, 0x9}, {0x5, 0x8}, 0x5, 0x0, 0x5}) [ 1423.689719] EXT4-fs (loop4): bad geometry: block count 788530232 exceeds size of device (63488 blocks) 19:03:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1700000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1423.999967] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 1424.007967] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.023051] IPVS: Error connecting to the multicast addr 19:03:45 executing program 3 (fault-call:10 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:03:45 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:45 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf0) 19:03:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) getsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/4, 0x4}], 0x1, &(0x7f0000000300)=""/155, 0x9b}, 0x80000001}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000800)=""/134, 0x86}, 0x7f}, {{&(0x7f00000008c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/144, 0x90}], 0x1}, 0x5}, {{&(0x7f0000000a40)=@xdp, 0x80, &(0x7f0000002f00)=[{&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000b80)=""/81, 0x51}, {&(0x7f0000000c00)=""/97, 0x61}, {&(0x7f0000003440)=""/4104, 0x1008}, {&(0x7f0000001c80)=""/112, 0x27}, {&(0x7f0000001d00)=""/63, 0x3f}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/12, 0xc}, {&(0x7f0000002d80)=""/180, 0xb4}, {&(0x7f0000002e40)=""/135, 0x87}], 0xa, &(0x7f0000002fc0)=""/68, 0x44}, 0x9}], 0x5, 0x0, 0x0) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r11 = fcntl$dupfd(r10, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={r11, 0x3ff, 0xfffffff8, r2}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="1c070000000b00000001017a0000"], 0x14}}, 0x0) 19:03:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3f00000000000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1424.095015] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 19:03:45 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1424.185911] block nbd3: server does not support multiple connections per device. [ 1424.206475] block nbd3: shutting down sockets 19:03:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1424.311096] EXT4-fs (loop4): bad geometry: block count 805307448 exceeds size of device (63488 blocks) [ 1424.419527] block nbd3: server does not support multiple connections per device. 19:03:45 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003119000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1424.463372] block nbd3: shutting down sockets 19:03:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x2) 19:03:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x80ffffff00000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1424.634845] block nbd3: shutting down sockets 19:03:45 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x301) [ 1424.780857] EXT4-fs (loop4): bad geometry: block count 822084664 exceeds size of device (63488 blocks) 19:03:45 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1424.830388] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 1424.867944] block nbd3: shutting down sockets 19:03:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x125d) 19:03:46 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x300) 19:03:46 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003219000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1425.065427] block nbd3: shutting down sockets 19:03:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$dupfd(r5, 0x0, r3) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000000)=0x6) r6 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x100, 0xfffffffe, 0x21ff}, 0x14}}, 0x44005) 19:03:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0xffffff7f00000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x125e) [ 1425.323703] block nbd3: shutting down sockets [ 1425.339051] EXT4-fs (loop4): bad geometry: block count 838861880 exceeds size of device (63488 blocks) 19:03:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x125f) 19:03:46 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1425.547351] block nbd3: shutting down sockets 19:03:46 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003319000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1260) [ 1425.703228] block nbd3: shutting down sockets 19:03:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1261) 19:03:46 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x500) 19:03:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1425.888883] EXT4-fs (loop4): bad geometry: block count 855639096 exceeds size of device (63488 blocks) [ 1425.938363] block nbd3: shutting down sockets 19:03:47 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003419000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1262) 19:03:47 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = fcntl$dupfd(r8, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r10, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r11, 0x709}, 0x14}}, 0x0) [ 1426.367850] EXT4-fs (loop4): bad geometry: block count 872416312 exceeds size of device (63488 blocks) 19:03:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1426.454100] block nbd3: shutting down sockets 19:03:47 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1263) [ 1426.611863] block nbd3: shutting down sockets 19:03:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1264) 19:03:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$tipc(0x1e, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) signalfd4(r9, &(0x7f0000000000)={[0x40]}, 0x8, 0x80800) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) 19:03:47 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003519000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1426.754707] block nbd3: shutting down sockets 19:03:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1265) [ 1426.883770] block nbd3: shutting down sockets [ 1427.037676] EXT4-fs (loop4): bad geometry: block count 889193528 exceeds size of device (63488 blocks) 19:03:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1267) 19:03:48 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x600) 19:03:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0xb8, &(0x7f0000000140)="9a5decefa6d406edd8d68048e48a0690112b0eefbf01dbf6dabafc32281c10796eb2fb00b72df1804d801eff202aecfccfa9531054d21c07674508de32db16cd5ae9c84a9ddbb1eb70eedc69a20278e6930a1f9760fa5974aeb296bee0d95d20ce17b0b6392eb12b6f5d443ff3c58cf8a0f6e86b93488079be931a14dd0f9ba76888e8d5381d386e5446fd1b9c07d1f903d2240196ecc8a4528cee2d9fd08872e672742048a02e371b02b6d9886f772ebeb895faf85bdb52"}}], 0x1c) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') [ 1427.160982] block nbd3: shutting down sockets 19:03:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1268) 19:03:48 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003619000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1427.330696] block nbd3: shutting down sockets [ 1427.504541] EXT4-fs (loop4): bad geometry: block count 905970744 exceeds size of device (63488 blocks) 19:03:48 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1269) 19:03:48 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003719000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1427.669587] block nbd3: shutting down sockets 19:03:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1274) 19:03:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1427.899572] block nbd3: shutting down sockets 19:03:49 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x900) 19:03:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1276) [ 1427.950294] EXT4-fs (loop4): bad geometry: block count 922747960 exceeds size of device (63488 blocks) [ 1428.035993] block nbd3: shutting down sockets 19:03:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1277) [ 1428.221561] block nbd3: shutting down sockets 19:03:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') preadv(r2, 0x0, 0x0, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto$inet(r1, &(0x7f00003cef9f)='7', 0xff9c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4093, 0xffd}], 0x1, 0x2) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f00000001c0)={0x0, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={0x0, 0xa}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400004066885e27cd016622a7d181eb6f2ab424b183c90601bd90080ea4497708fd6fec8fcd8d95049d6c858154a7d3d22101d0477556fb093cb817baa93ea76ce0d53da532cef4ae8f30ea076d047450d577f60a4f50e0f9271d97d12c91677d5347e9196f02e5412e7b1787886a17b276b8909b444fe78d10d692cdcdecb60c8f5f1d3967c6db4dec5c6f7cd5e33bb1dc7c0e1728ff3e38b901fbddbe5f35e140ecb7a434367c0b29c1540fb1732f7d0186c15bc9a5483320983f9527eaef31", @ANYRES16=r7, @ANYBLOB="0907000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 19:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x1700, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:51 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1278) 19:03:51 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0xe000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:51 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xa00) [ 1430.201761] block nbd3: shutting down sockets 19:03:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x1279) [ 1430.416116] EXT4-fs (loop4): bad geometry: block count 939525176 exceeds size of device (63488 blocks) [ 1430.455287] block nbd3: shutting down sockets 19:03:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127a) 19:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:51 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003919000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1430.671346] block nbd3: shutting down sockets 19:03:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127b) 19:03:51 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xb00) [ 1430.828540] EXT4-fs (loop4): bad geometry: block count 956302392 exceeds size of device (63488 blocks) [ 1430.838357] block nbd3: shutting down sockets 19:03:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x74fbac7abb52e299, r8) fcntl$dupfd(r9, 0x0, r7) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x20000, 0x0) statx(r10, &(0x7f0000000000)='./file0/../file0\x00', 0x4000, 0x200, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r11, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r9, @ANYRES32=r5, @ANYRESOCT], 0x14}}, 0x0) 19:03:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127c) 19:03:52 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003a19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:52 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe00) 19:03:52 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1431.259080] block nbd3: shutting down sockets [ 1431.295881] EXT4-fs (loop4): bad geometry: block count 973079608 exceeds size of device (63488 blocks) 19:03:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127d) 19:03:52 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003b19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1431.497263] block nbd3: shutting down sockets 19:03:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127e) [ 1431.753334] block nbd3: shutting down sockets 19:03:52 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xec0) 19:03:52 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x127f) 19:03:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1431.818503] EXT4-fs (loop4): bad geometry: block count 989856824 exceeds size of device (63488 blocks) [ 1431.857533] IPVS: Error connecting to the multicast addr [ 1431.917991] block nbd3: shutting down sockets 19:03:53 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0x0, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="276e1ad0acb3ecb3548114856c6f69723d2e2f62757365"]) stat(&(0x7f0000000380)='./bus/file1\x00', &(0x7f0000000440)) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) 19:03:53 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x4b47) [ 1432.181376] block nbd3: shutting down sockets 19:03:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x4b49) 19:03:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1432.373024] overlayfs: unrecognized mount option "'nЬ³ì³T…loir=./buse" or missing value 19:03:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="0c0912cfcb19524ea6691f2e0deac5d644281312793272ac6c892947ce05a0c28b24d07c2ffd77935d43c82d8bb26e10b07209a484f81e18c08a60382e8339677e3eb7e3e8780b1f6e1be8a165c7842c461a45"], 0x14}}, 0x0) [ 1432.481297] block nbd3: shutting down sockets [ 1432.493078] EXT4-fs (loop4): bad geometry: block count 1006634040 exceeds size of device (63488 blocks) 19:03:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x541b) 19:03:53 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003d19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1432.640557] block nbd3: shutting down sockets 19:03:53 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf00) 19:03:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x5421) 19:03:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1432.814840] block nbd3: shutting down sockets [ 1432.837134] EXT4-fs (loop4): bad geometry: block count 1023411256 exceeds size of device (63488 blocks) [ 1432.883451] IPVS: Error connecting to the multicast addr 19:03:54 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x5450) 19:03:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:54 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804003e19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1433.176655] block nbd3: shutting down sockets 19:03:54 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x14cf) 19:03:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x5451) [ 1433.334862] EXT4-fs (loop4): bad geometry: block count 1040188472 exceeds size of device (63488 blocks) [ 1433.401747] block nbd3: shutting down sockets 19:03:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x17000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:54 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x3f00) 19:03:54 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804004819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x5452) 19:03:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r4, 0x80000001, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0xa, 0xa, 0xffff0001, 0xdcdd, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r1, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0x7ffffffb}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r6, 0x709}, 0x14}}, 0x0) 19:03:54 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1433.712804] IPVS: Error connecting to the multicast addr [ 1433.724059] block nbd3: shutting down sockets 19:03:54 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x5460) 19:03:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r9, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x9, "56560f11b26075fcd564525cc092ab747e1db735c468160b08955370c555497b", 0x2, 0x26eb, 0x6, 0x10001, 0x1f, 0x101, 0x7, 0x6, [0x5, 0xa623, 0x2, 0x90a]}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="d30757929c432643a18680f63a641e"], 0x14}}, 0x0) [ 1433.877687] EXT4-fs (loop4): bad geometry: block count 1207960632 exceeds size of device (63488 blocks) 19:03:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1433.958902] block nbd3: shutting down sockets 19:03:55 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804004c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab00) [ 1434.252266] block nbd3: shutting down sockets 19:03:55 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1434.276033] IPVS: Error connecting to the multicast addr 19:03:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab01) [ 1434.361202] EXT4-fs (loop4): bad geometry: block count 1275069496 exceeds size of device (63488 blocks) 19:03:55 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x6000) 19:03:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x80ffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:55 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1434.506593] block nbd3: shutting down sockets 19:03:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab02) [ 1434.739668] block nbd3: shutting down sockets [ 1434.790876] EXT4-fs (loop4): bad geometry: block count 1610613816 exceeds size of device (63488 blocks) 19:03:55 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab04) 19:03:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x2122, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(r8, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x8}, &(0x7f0000000100)=0x28) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:03:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:56 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006819000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1435.046829] block nbd3: shutting down sockets 19:03:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab05) [ 1435.100698] IPVS: Error connecting to the multicast addr 19:03:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0xffffff80, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1435.181024] block nbd3: shutting down sockets [ 1435.219458] EXT4-fs (loop4): bad geometry: block count 1744831544 exceeds size of device (63488 blocks) 19:03:56 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab06) 19:03:56 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc000) 19:03:56 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804006c19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1435.358823] block nbd3: shutting down sockets 19:03:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab07) 19:03:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1435.506055] EXT4-fs (loop4): bad geometry: block count 1811940408 exceeds size of device (63488 blocks) [ 1435.549359] block nbd3: shutting down sockets 19:03:56 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab08) [ 1435.760929] block nbd3: NBD_DISCONNECT [ 1435.770853] block nbd3: Send disconnect failed -32 [ 1435.792836] block nbd3: Send disconnect failed -32 [ 1435.827877] block nbd3: Disconnected due to user request. [ 1435.835861] block nbd3: shutting down sockets 19:03:57 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007419000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab09) 19:03:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r8, 0x709}, 0x14}}, 0x0) 19:03:57 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:57 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc00e) [ 1436.058160] IPVS: Error connecting to the multicast addr [ 1436.084525] block nbd3: shutting down sockets 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab0a) [ 1436.224249] EXT4-fs (loop4): bad geometry: block count 1946158136 exceeds size of device (63488 blocks) 19:03:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(r2, 0x0, r0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000340)={0x7ff, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fcntl$dupfd(r10, 0x0, r8) ioctl$VIDIOC_G_FBUF(r10, 0x8030560a, 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/80, 0x50}], 0x2, &(0x7f0000000240)=""/121, 0x79}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1436.320801] block nbd3: shutting down sockets 19:03:57 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804007a19000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab54) [ 1436.573910] block nbd3: shutting down sockets 19:03:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r8, 0x709, 0x0, 0x25dfdbfc}, 0x14}}, 0x4008002) 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x40049409) [ 1436.710835] EXT4-fs (loop4): bad geometry: block count 2046821432 exceeds size of device (63488 blocks) [ 1436.753454] block nbd3: shutting down sockets [ 1436.789279] IPVS: Error connecting to the multicast addr 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x40081271) 19:03:57 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400002d000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:57 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x40086602) [ 1436.882737] block nbd3: shutting down sockets [ 1436.948593] block nbd3: shutting down sockets [ 1437.017096] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1437.054000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1437.064272] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1437.094505] ext4_test_bit(bit=127, block=4) = 0 [ 1437.107152] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:03:58 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) readlinkat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/144, 0x90) recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:03:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x40087602) 19:03:58 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xcf14) 19:03:58 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400003f000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1437.279116] block nbd3: shutting down sockets 19:03:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x40101283) 19:03:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1437.431390] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1437.514482] block nbd3: shutting down sockets [ 1437.523435] EXT4-fs (loop4): orphan cleanup on readonly fs 19:03:58 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401070c9) [ 1437.568902] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1437.632136] ext4_test_bit(bit=127, block=4) = 0 [ 1437.692263] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1437.775532] block nbd3: shutting down sockets [ 1437.809977] IPVS: Error connecting to the multicast addr 19:03:58 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000064000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:03:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401070ca) 19:03:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1437.979086] block nbd3: shutting down sockets 19:03:59 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:03:59 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf000) 19:03:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000040)) ioctl$TIOCCBRK(r3, 0x5428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:03:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401070cd) 19:03:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1438.283100] block nbd3: shutting down sockets 19:03:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401870c8) [ 1438.337353] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1438.429049] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1438.464744] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1438.500613] block nbd3: shutting down sockets [ 1438.534802] ext4_test_bit(bit=127, block=4) = 0 19:03:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401870cb) [ 1438.558368] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:03:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x17, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:03:59 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xff03) 19:03:59 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000007000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1438.728170] block nbd3: shutting down sockets 19:03:59 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x401870cc) 19:03:59 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x33fe0) [ 1438.870606] block nbd3: shutting down sockets [ 1438.983207] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1439.030941] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1439.043499] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1439.063213] ext4_test_bit(bit=127, block=4) = 0 [ 1439.072925] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:00 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x4020940d) 19:04:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:00 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400002d000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:00 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="141d0000", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:04:00 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x34000) [ 1439.311230] block nbd3: shutting down sockets 19:04:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x80081270) [ 1439.475922] block nbd3: shutting down sockets 19:04:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x80081272) [ 1439.573459] IPVS: Error connecting to the multicast addr [ 1439.614008] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1439.710356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1439.721654] block nbd3: shutting down sockets [ 1439.738545] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:00 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x80086601) [ 1439.813636] ext4_test_bit(bit=127, block=4) = 0 [ 1439.845315] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:00 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000064000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1439.952977] block nbd3: shutting down sockets 19:04:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0x80087601) [ 1440.144860] block nbd3: shutting down sockets [ 1440.259729] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:01 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x40000) 19:04:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup_ro(r9, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:04:01 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc0045878) [ 1440.318156] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1440.326752] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1440.370896] ext4_test_bit(bit=127, block=4) = 0 [ 1440.384589] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1440.422347] block nbd3: shutting down sockets 19:04:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc0045878) 19:04:01 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019020300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1440.612687] block nbd3: shutting down sockets 19:04:01 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc0101282) [ 1440.813844] block nbd3: shutting down sockets 19:04:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc0189436) 19:04:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x17, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1440.961461] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:02 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1441.011098] IPVS: Error connecting to the multicast addr [ 1441.056161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1441.061961] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1441.068335] block nbd3: shutting down sockets [ 1441.088576] ext4_test_bit(bit=127, block=4) = 0 [ 1441.098321] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc020660b) [ 1441.371859] block nbd3: shutting down sockets 19:04:02 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x400300) 19:04:02 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019030300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = semget$private(0x0, 0x8, 0x0) semop(r5, &(0x7f0000000080)=[{}, {0x5}, {0x0, 0xfffc}], 0x3) semtimedop(r5, &(0x7f0000000080)=[{0x4}, {0x0, 0x0, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x8, 0x1000}, {0x0, 0x0, 0x1000}, {0x0, 0x6, 0x1000}], 0x6, &(0x7f00000000c0)) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000000)=[0x5, 0x0, 0x1, 0x6, 0x0, 0x1]) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a62adce87d4893fce267acd81ebde39b0d7f2c1465455154884a4c746a7fcc9542aaecdd928679fbea672846d606bf649354ddf2ef838b9d0900b15e9e633ff460e51a8fc48d8c2f6a00000000000000046b425c3a129b796382fc7d1155719d67f007000000d8a0361654eeefe65ab97d708c3bd942ae48afbbb01e276b602b39869b9e6b2b4d84", @ANYRES16=r6, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) 19:04:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xc0481273) [ 1441.622713] IPVS: Error connecting to the multicast addr [ 1441.631194] block nbd3: shutting down sockets 19:04:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x202) r1 = socket(0x2b, 0x1, 0x4) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) r6 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6002, 0x0) ioctl$NBD_DO_IT(r7, 0xab03) 19:04:02 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1441.776385] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1441.851000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1441.865253] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:02 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x50, r1, 0xd9d01000) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x1, 0x7fffffff, 0x40, 0x4, 0x1f, 0x101, 0x3, 0xfffffffb}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1441.917449] ext4_test_bit(bit=127, block=4) = 0 [ 1441.932250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:03 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019040300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1442.021049] block nbd3: server does not support multiple connections per device. [ 1442.052863] block nbd3: shutting down sockets 19:04:03 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x9, 0xa, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)={0x8006c, 0x9, 0x7, 0xa, 0x410020, 0x81}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$NBD_SET_SOCK(r4, 0xab00, r10) r11 = fcntl$dupfd(r10, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r4, 0xab03) 19:04:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x4, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:03 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x10}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:03 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf0ffff) [ 1442.221845] block nbd3: Receive control failed (result -107) [ 1442.228832] block nbd3: shutting down sockets 19:04:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x5804, 0x8, 0x4, 0x40, 0x766, {r2, r3/1000+10000}, {0x3, 0x0, 0x81, 0x78, 0x20, 0x5, "a268d0fe"}, 0x400, 0x3, @fd=r6, 0xaa9, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x13f, 0x5}}, 0x20) r8 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r8) r9 = syz_open_dev$ndb(0x0, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$NBD_SET_SOCK(r9, 0xab00, r12) r13 = fcntl$dupfd(r12, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$NBD_DO_IT(r9, 0xab03) 19:04:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x300, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) r14 = fcntl$dupfd(r13, 0x0, r11) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000009b0e0b3d00f088aea7995c5a659d49ce1a854a0ba6a512172a5c3cbfe1f0bf0643a1ae68ac2e2f679bebd5b1b17e607d8067085d73a7c1353c3912870012a6a5ce63bb16bb01059871534e561bb22ae68d81b285f57ea90fdf6ea8272b10ffaefa0de7170025d04b9bf166ce7bb96a3a6af945c2710e40bfc0aed096d5659bd4defba4dd8a1db23b9385de0c14bd799d8c92320c", @ANYRES16=r5, @ANYRESHEX=r14], 0x14}}, 0x0) [ 1442.380695] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1442.456286] block nbd3: server does not support multiple connections per device. 19:04:03 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x1000000) 19:04:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x9, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1442.503073] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1442.519610] IPVS: Error connecting to the multicast addr [ 1442.526410] block nbd3: shutting down sockets [ 1442.526552] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1442.575631] ext4_test_bit(bit=127, block=4) = 0 [ 1442.581550] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0xe1de9d2eba485be3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:03 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019050300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1442.748561] block nbd3: shutting down sockets 19:04:03 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) sendto$rose(r1, &(0x7f00000000c0)="533f8866bd6721e6a6557c5e4efd5f951a5c9ac69c84d8bc045da313f48e0c2f25e9cb1478507fe5cea1e8c2109982fb23cc0b47dbe26cec9d41d970fa32fafa513782e3bed2c809b66fb1bce64868f0a2411a96bb599ce89341c71af104ae6f6f8377ed268df972c0cce284ef3e716997dc5e53679f8d77bdc9a429ee5004937d97c59e5f3c669b2e663e5c93419ff9086a1eb9c20a182cd1ade0b94ba8c7bc9b607d06a653869a92a0cfd9ae2de7952cb0d18a3d9848ef4c802d20113358f4b3fafa1319015528800e9e754593afc7c07c24c8bb7758ef2c8df7e658b168be3bf3dbfd51875b0a6de249ac0760169e15ade287999c698bf522215557b0525a721b9df9a677c64c00cc47ff744f82720f0161d5ab5b2083e0c1a3bd44291c59299e98e1fd05b2783ee70eab0f47789843ecfb0b2f4b8c9d15f9fe25856cd53052189dd29d999100ca0c10c9760b6306505b901b9884513559ce854fc97710c1800a4dc5eb93fb1971fc51842d3177f240ff0857e91781d727bcbde038594b4fbfe96d2fb15e5cb72ce3e3917207c6a29b1b3df484dfe0da583584a4410c110518b945d4d0705cfe383a056a5117e683bbd1f5fc3354dff192c53456008ccddfdaa123e5aa482048498e69012d602f2fbf3a94e21baa3d862979b77b41e8628983d09f918e0dc536792f4c6d1f4b90e6f525426870ce26b62b395c092e97887550c96f43625d4852705f32c2a7c8c670e801c70745f4c4961103da457d65a91e0162bc5df08e46b720315df67eb4cb1e6f9017c3946566bb6fdc8c5f972b5ee79d3ee114e8f91b124a9b70749d068ecfdce5850c12331e42d4dd59703291ddb745d8c24e83b96af78ad62dd44d290c2a1d1ad1e94ac350ff761410461339609ddb0b1381a868fc50780f7fce79bb546f1bca3148121d4bfaf90553ddc46c0118d91dfffbc74ce8964909f16aeca9fcb4473350002e6c59f040ff55f66e0086560733bf1b8a2cc69fbe754a239572f665bb39f48a8437c0de12edb8585131f3acc785d9f41e81466ced68d64abde0e16bf3a289629ba73a96e45ae99716e6082b46732ce8bbf669b856fa120a37152db5252254addbab4c95d29d7f43f5ffbc796be215e1099b1c44a5b07820d82d2c6a9a252a77d5497e73451717b5a8e67206124a8d684bf070d39db98993bfaec9749480c57ab0528511346cf1c724ef6100eb7ade2c84d97f1e0f1bdccebfb403edb8a7ae6da9a33d4ab92e9372fd698236c9b6fbcfeffc3c8ee684bf1f8d8bd1a389d71642cc350611497735043b4eeba787b99ccee2a41e15070acfcae8277251736a39977f18814265cf59bae2fd6b7cbe94f93b932985cbed92848228e6f2c7550f8aa8330c04ee5b7c55837de0c1b54f2868a5e9e1efecc1f57e2a5f18d38ec804795dd3ff5b9fa1710d1757cee5fa2539765ad2f8a572d1e9c53aaffc6ac3fd3b705f3c9ae8fb7d8b51139704f507564807fef6fcf395233c9eada3252e7cb400c4308b472246be5c2cba083bb6b03a39b6b9849a7ff7a29185370038cc682c54b2fd3671a79b0df9c2b82a47231a3d04c327d8f9a4f670662f988fea604902b3822420486f9121ea605a3369d2054f75059efbf05b5d7c16251226c988f1c6e079903555b7ac6b73e3574bec736fe26bebff3ce84751adb9ebd20bc91ec88c0cc5ae0200e6f2f3607a015cc6dfb82a36b8bc50ea100c1893a3a6e4ee278997907e43ffe329fcdffdd897bc8883cdd2699132112f5c7dfeda4ace3ed24fdc8080717bc334dce9f215d242966030adacc70041a9bc96a5a892dbfac153822d2e7539a4c72ce8e67226e0333a365371f7bc57fb8b0339a670c7aee6858d6ab0404bd38c35b6db0582db95f0de96d2f5018df4e3b1d2b30fae94a7e99aeaa6aa52c49b5260bf3163528b299b1d086413dc583c6ef49f29fe962003f9ce57fd493d92b19fd2258e7793f0aa25974c64cb2c17948cc03d8c15419a0a388760d36c2b7aecdae87964a07493cbcdf999d09a3c5448c481a5285565f506a305146007efa7e69c52c2fa7bbd9e800fc26cca09426b384987811ff60ed02e3ab65fb39860d9a362608d35c93aac05a10f6624f03f93606e403c720f809f1c66238d2c0da5e9ac5e681841a5f433df861d2979d7951c4f541fe14ae3f3c2e0bb6a09b2a417e55e80592bfffb75024dbdf72cd041c128b1cdcd4df7d578f6a9081a2dfda88181658a078ff19423c54b2bc74643b9d9a9f0bc6d25a39cfb0106f408b2259afa7bebc7e20d715581bbacfeb880e5cbe3c81f6e4a0631024d17c6d89888cc614f4cb77908dc9ba789e7339afec35f53924590a79cc6bab2b4329d4d4ac6c818cbf04720d3e2834a726d5413733e100ea6e234717568710632f9cbcc05c602fceeef517f362841364f28ad31eb292f9e0bb3cfbf95f7b86ae2ec3610fa22b6ccbdc48f5991f71341e06e2a61a48965030d65789f52bbebb1df5fbf2c6a9858ebd1b92395c3f8e8dd8264f6675297fd0e7890e9e847af69ee5fe006ea4f3cf106e35bca515506d33d446ec33c814ac2dddacfa1af6a6938188f19a832ac1fb667d2406cb0b0f649d7d2518e65919dfbcf1113b477ba630cef6f6e9489fd1723c33a4b25b4f1490e95b2cd449d55385fd162fabc948478b21ae85cb66e523bad13401c6de69b33eca3282d4b010eebfac31da647437c41830b6f37ceb9286874a09e65d1c65e78cc3d8e49237ce41cbbc9a5bfd4f9f287f232df1a57eefd1ae863d341349530a6cbc4925b95e9d56ad9de542b5d451f6027d75653217c89e8726c30bd53a2e4246f4c5b8c11ce5c5eede2e451504f961e0c55dceba7b2c277f6907dfa3f6019b65c6045ab2db8c53a32943f1a7da53bec4e4dd38908fb7cb39eecb65f2d3bab412b278ce0f0c8561a4634711ca552d375fde20d72a87a9c35e222b77e32023da03272c594bab898d10ff5fa32aeaced2306ca77efb7b2f3bdaaa0b8bd711c8ffb0901234ff4b2b377eeb9e089a044953b2d01579289afa608dd77b7c17a15c08474271d361aad9b237c6e3cf2e93b339308659ad235652e0b937c4582314ed36dd6a6d1ba6396006c224d4a8f223feb0114c73f943e2b2f09b7b5459087b60664dd73ee8c180f6fe3e6cb2cf2b07f9b62a919dc59332d71a1cb292b0ca46522ba07b0bf89ee203fe93b04b1c165ef699fd6237ff8da5c942576b9d32b71243219697fc330fe1bf0d2869c72b16cb5c88bbd8e591078327ec83721849199b4cd7c229d7581bbf324ab51aaa0861ec23363ac0d14c3f0eaea0de703f801753749e6b6dd5038d44c030138f0872f1e84bd285112d284c12550f0bce1ae1ec771a4d501892f6d570a49f0cc2331a2a6b8ccf8e968e2293944eea47ed214abdbf54b697971701bce0af968e5b7475970e57ff89c0341c568c6cc518a4eaea8a39a327d6adbb62937c70229daa58ffafaebb2e05d4514664461ad23305c996f431389f996c795843193648edb1ab001250c2fb97fc5d0a4fa6b4a1cf727e799d94bb38805d147275a41186c65e8cf735020a7a5c677e88d431689b48ada698387c36736dc646da275bf7950ef1c79a72564ac254b49991a1ffc35d93559dea7469d5b944f50e9eff94d9d58a68c4ce1d7b914f45478f097fd44db97188268f32802e6a2b0079a25924d49d8efcb5449510c55563c92c9f8eb96c4fa92b5eac790373b198897beff3c86608385fcfb2cc3035ef323d4133769d4bde8dd83825edd52f9f71f7648d2f1905f34d9efeeb9fdae6b484b86e419966a40dc8b9c35795bae85b26b6298fc7e0098dc4785815d5490be3947e2cb6ddc2a84adca9363011789e6bbe180950818f7d99cdd10e539b4d94eb6fbee591e33d89b410692db2a17e690a4e19cfbea51968ec78a3319d1d40cdebbeda0a37d8d894cace8aa6b00c2238e7d4b98324b244383ab01d46a8cc273c47cfd1cf9abcea4c8310534ac005d2bc9899939d5b22a8edf1ba4614c8e27e2ff04ae2baa1c1c6bee6881d298f147f9741ca51302dfb83d2d179bca43cde392a1bdc62f0075822672c092c2f7c66e8426bfd5ffc3c714db694a960567577c58c3f9a7e2a73632bb4e97a4098d94e0917f80909955ce2a8e800f927d09a12111b6a505333a39bddc9d4637d1f164f0479521269cbfb966996c78cc12cc53fe18d7d6c53ee65921cff154bdf5a449cef965bfc3764f2378251a51d0fb350ab9e381d024c3aace4d079c576ef1bbc12fff42c7276b0928292d4081f94deb4c0f96df2da8226263b11ee7191639dbbc6c078a4997a3cadb448fb2275178a565ec7403ebc360fe76add267b3079a44ad9f4b6c5b4393a02b3e3333a44bb635d20d8de5494f69ddd01d75abd6428cfb25dada6a05d6f553045d34d754515145e911ee9e3a938da145f641f1b7f2054dca914ac87e2234d27534fb7661dc0b691c2b1ba971086e19e3c349b59fa475acadf4d8ed124a91d1a184cf14f523f1eb644ef486d4f98130531306259891fb7032a308b466ada059cc8707b58d118c1b4370469dd1b4ef95aa502a93fe2eb7da5c8b3a325f6d833d23e082527751b822684c2dec8994d6aeb9f7350df7d4535a135cb3daa1476d969b5fac3c75475dabb9709a478e4e0c849f936909cc1d2fc746fa94484a90411ee06449fa2e9f97962f4c2a40d12b6211a605c93d7dbbb479bcefd230e56b5869176d866e44c4edd3f887ee0268499db1d403da75393627e04cb89d31c6e54a542f66ac3c35095c5ed031b89658a67a72e08eaae1c0febd52080c9f6bead3c5d9c58979ecf28c5c91103d55c7c69a1bdfa01afd2c7c96890cc748f5a443abde204372a2655901f004d48ff4dc9b3ef4adee0d733795c8bce2325ec2112be7fc60e890411ec062d5c854c445c57b96ad16dcf3fac7474f09538ac7970572d177b6a986b9752a04950e56b54e33da4215ba70df2f19f781de4d03f9ccae7d22e9a5d9477745a075ddf47b251259e0d581a65378fcf2744738c29c0006bb6e2a0ec5ea39ffe2d5deea83c55fd26b0d88779b40af569eb82443e16529b2e903487b8689cb201a0e78f1bf329f71a354a91527b61e09dedd3680ae03f8c9b62ad353c5db01445b6e872273f0e297cbd9e947ae054d4ec6526fe418cad7bc022dfc7055b77041d13238a4233e7d108b2f4ad13c8698f12cf38dd00a315caab10b593b461ed44da17832cb5c19542d3ef3ac89af3eb81d79a8e6fd15deaefaf9b39191f90b23e4c789e70ea5f421fdfda4b88942562981f910c6b09f599e8cc4e7af68234ad76a5ca452b9257fa571080ee1ea5a7af33b591aa0b143032ea2617e6b14b73e3ff3253de86d439bf87fa0a7ff523cb8e06d10d79be6109884d97806802f4e2e5b2d8a0400627b33e29dd86f5dc0b81515cdfe118db8460eff9231d991c69a7bc202ceef7146ab2d93163b7ddaf7347dbfd917ee61d2051be57a13eac140b186635a7e253be2391f9d4058053658f358450a10799d4e686e852be25b1a0828134e487c65ea061465f5188d2d900d165b80adbe8de7b1601211adf6f687b3e8a90d0636f1e061c9911f5e12faa80b0f49f94987d89f131815b785f4233e01b915ebf553820544cd479744529f2d037288b504a4c6463916b2948ce7d06a924ecbd01674856d57c0ddaf66525f038f093d4804e6f22e5e806d7449b4b4ed022ecc1c58955b0aa485d3f70b3ea0731902c4b27789edfaca9fa25d09ab88a45f3bcdf9fe2e72ac64", 0x1000, 0x0, &(0x7f00000010c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) connect$netrom(r1, &(0x7f0000000040)={{0x3, @default, 0x3}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x17, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB="14001f00a1e181042f3a772068d4375e2d4ed786356c2530a87ffe", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1442.986262] block nbd3: shutting down sockets 19:04:04 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x60}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x900, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1443.150710] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1443.189435] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1443.201007] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1443.264199] ext4_test_bit(bit=127, block=4) = 0 [ 1443.289172] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x1700, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:04 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019060300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:04 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x2000000) 19:04:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x3f00, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1443.909820] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1443.979059] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1443.999789] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1444.019760] IPVS: Error connecting to the multicast addr [ 1444.039666] ext4_test_bit(bit=127, block=4) = 0 [ 1444.067804] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:05 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019070300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7fff, 0x1000000000001}) 19:04:05 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x3000000) 19:04:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x2, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1444.467148] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1444.525132] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1444.530908] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1444.547271] ext4_test_bit(bit=127, block=4) = 0 [ 1444.553427] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:05 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019080300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:05 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1445.041689] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x9, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1445.165889] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1445.182964] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1445.237081] IPVS: Error connecting to the multicast addr [ 1445.248566] ext4_test_bit(bit=127, block=4) = 0 [ 1445.256801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:06 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x4000000) 19:04:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x7, 0x0, 0x0, [], {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback, @local, [], "39a4ef13f5cff0be"}}}}}}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000140)={0x7, 'veth1\x00', {0x7}, 0x401}) recvmmsg(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2162, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000514000125bd7000fedbdf25080003000200000008000300020000000800010001000000080003000000000008000100000000000800030002006a00083d0300010000000800030003000000ff1cfa3c4279cc44e93dfca8af5158c9b32d05bc80c583206615"], 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) 19:04:06 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019090300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709, 0x70bd26}, 0x14}}, 0x0) 19:04:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x17, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x900, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1445.686056] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1445.722284] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1445.749592] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1445.788430] ext4_test_bit(bit=127, block=4) = 0 19:04:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r5, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00@\x00', @ANYRES16=r6, @ANYBLOB="090727bd7000000000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000100ffffffff08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="080001000280000008000300", @ANYRES32=0x0, @ANYBLOB="05000100020000000c009900040000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) [ 1445.805664] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:07 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:07 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x1700, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:07 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x5000000) [ 1446.205372] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1446.283657] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1446.315776] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1446.391611] ext4_test_bit(bit=127, block=4) = 0 [ 1446.432020] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1446.485532] IPVS: Error connecting to the multicast addr 19:04:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x3f00, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:07 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190b0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r0, &(0x7f0000000540)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7ff, @ipv4={[], [], @broadcast}, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="bfb7d18004af08f739a42b61e66af55f40078e46cd7fd15b41db3b32ab4502eaf7105309f90a8745f2ce4511c2", 0x2d}, {&(0x7f0000000240)="b425f908c009cd4100ca34e6fd399b15a0a5ced4affcb53cdc77a3b4001ff03faa9cf505b45a1fe3e62eaf1ac75fc3fc59423c6202b3822e6c5dd940615d2f91c628edb7d733b691603c9d5ae05b5c37e41821f801877438316b1884038bd4e3b9741c0d94968526d12a535b7cee163010b6d10db6bd61698cf02c2ee603f13674a5ee3b2839c42241f5e9cbac0d90650e4a840235c207b0af5720b904e5e0c71bf4aed5f6cbad7a2df6bb45908176a97e0c4c95a2baed2757618b61bdee96608fe304a535cc9f7cfa2f223dd2e4403fae1c7c3d5166e4b1108c25ca3a48bafe7e43fc94e3a2d0", 0xe7}], 0x2, &(0x7f0000000380)=[{0x98, 0x116, 0x7d573a99, "ce0dc8bb96f1966114e80df8eda23c7cfbd56eb536a853891420c158c5b8b3481049874c5cb0490ce02daf76c627998424c93870a0ea4cbb8dff9b85b5088184c9c782ba7a85affb620b51eedeb1ac02b654cb3a35ddf0b9f293183b1a64088b5dc9eba2be038c9f7929ef42188acac53732a9a4217112015b48a6dfc23e9cd9c23a2fb1d7"}, {0x100, 0x117, 0xfffffffa, "efa3f2f15beae49ccedd8603905045d0b7363ba7ebe7e5fcb30b02ff0f76a7d761466d469243f68a3e20f450e1b5f9cf408e5ead9a0f9c1c775b0cb2997d6b12900137b42f1d0f504db9d4b5688f134e91a32d310d52a34856582e53057ca35a271458f4daf51744e65703da7d2bbcdc6bf9a6e06db2137e54f20233e1450313dfb361634f057a77f25b7c0c1472ce06ce477ddf6e425180e95448faa990da0cec986274164ddd09c3b1aeb426ce1fd328502b1fda96498dc21c4669048764c25f05f92dff7c70a70bb5144af866f79ed1fb658e8f74c4a4dfeb9bd945e7a6085691b0e8db59192c4548fe"}], 0x198}, 0x805) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@private0, @in6=@ipv4={[], [], @remote}}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040), 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x6b, &(0x7f000001d080)={&(0x7f000001d000)={0x68, r8, 0x709}, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 19:04:07 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2ff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x34000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:08 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x6000000) 19:04:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1447.070253] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1447.129393] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1447.169953] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1447.252013] ext4_test_bit(bit=127, block=4) = 0 [ 1447.291601] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:08 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x400300, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:08 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x300}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1447.512441] IPVS: Error connecting to the multicast addr 19:04:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x1000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1447.724313] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1447.774382] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1447.783047] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1447.871809] ext4_test_bit(bit=127, block=4) = 0 [ 1447.910823] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x2000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:09 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190d0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1448.258969] IPVS: Error connecting to the multicast addr 19:04:09 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x500}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:09 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x8000000) 19:04:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x4000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:09 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190e0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1448.757541] IPVS: Error connecting to the multicast addr [ 1448.829422] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1448.909686] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1448.924183] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x9000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1448.989471] ext4_test_bit(bit=127, block=4) = 0 [ 1449.006378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:10 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000190f0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x17000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:10 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x9000000) [ 1449.382978] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1449.434515] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1449.442006] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1449.475259] ext4_test_bit(bit=127, block=4) = 0 [ 1449.497597] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x3f000000, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:10 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019100300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0xa, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x1, 0x40, 0x73e7, 0x7, 0x9, 0x3f], 0x7, 0x80800, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fcntl$dupfd(r10, 0x0, r8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x1, 0xb54d8a0, 0x5], 0x3, 0x0, r7, r10}) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x80ffffff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1449.870614] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1449.939729] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1449.956244] block nbd3: Unsupported socket: shutdown callout must be supported. [ 1449.967120] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1449.994121] block nbd3: Receive control failed (result -107) [ 1450.015029] ext4_test_bit(bit=127, block=4) = 0 [ 1450.026193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1450.036015] block nbd3: shutting down sockets 19:04:11 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x600}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:11 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019110300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:11 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xa000000) 19:04:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1a000, 0x0) ioctl$NBD_SET_SOCK(r9, 0xab00, r8) r10 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0xffffff7f, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1450.505182] block nbd3: Receive control failed (result -107) [ 1450.511880] block nbd3: shutting down sockets 19:04:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1450.622946] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0xffffff80, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1450.723387] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1450.736271] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1450.748323] block nbd3: server does not support multiple connections per device. [ 1450.791409] ext4_test_bit(bit=127, block=4) = 0 [ 1450.808337] block nbd3: shutting down sockets 19:04:11 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) fcntl$dupfd(r12, 0x0, r10) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r13 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1450.841028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:12 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019120300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:12 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xb000000) 19:04:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x11, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1451.192736] block nbd3: Receive control failed (result -107) [ 1451.202310] block nbd3: shutting down sockets 19:04:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200002, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x113, r6, 0x5e5b2000) r7 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1451.275501] IPVS: Error connecting to the multicast addr [ 1451.302320] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1451.373816] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1451.382381] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1451.383645] block nbd3: server does not support multiple connections per device. [ 1451.422535] block nbd3: shutting down sockets [ 1451.437213] ext4_test_bit(bit=127, block=4) = 0 [ 1451.453006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:12 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x700}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r6 = msgget$private(0x0, 0x0) msgsnd(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="4dc2dafbbf7af2fdda7d59f6910d42947c86790e9cfdeadb70c1f2e65eba19661dadd7a260d514352b9a0d345bef65e80c22b38aaee19afdf72e3a6dc338e5ad99eae4b3053f698a037fe402a910b5013a7cb9c157dc4a54e8699e368d9c2b9a4bf129ce9f1793e32bb102c8e3add1f2c6"], 0x1, 0x0) msgsnd(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="0307ea5f46ec6090fc8361c72974633d9c59cefb60a7482c6e504c690bf8fd3ce9e26064e7318e217948a865c4011e4a47f3d79f5db7e398f5a8ebf03f3f7bbc215ee8a6e1cca50ab09a4e8e6b9da06e708c10a93ae95edaa3a0d04a3c46a2f985b6c321068b8f4ff2b2a324a59ace58771fb124b44ce3ba229b1ec67c76ff6472f8fc25c712aa67dbfaf6876f271900eba6ae1fdb464d95b0415bb920488e7a2a812378a24c0c0074ebf0b7b63646a73aee4a165f5a58d87e6bb4641613c4cc3029270d4cae205312076ac24548f5f146a8689c62ffacb2b1a5d2e299640998c625023cf48df5392f911697401405"], 0x1, 0x0) msgsnd(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="0200faffffff7f00"], 0x8, 0x0) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000240)=""/255) msgctl$IPC_STAT(r6, 0x2, &(0x7f0000000000)=""/59) recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000039", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) 19:04:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r10, 0xc0305710, &(0x7f0000000040)={0x0, 0x200, 0xfffffffffffff000, 0x1}) 19:04:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:12 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019130300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1451.633171] block nbd3: server does not support multiple connections per device. [ 1451.680140] block nbd3: shutting down sockets 19:04:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090700018d0000000000010000006981cad9ecb91fbab1134a6671d4c7583cbbbfa6e8bd431bc351f297cf3665cef2a6cd9e9af6d788c73d95f5514d0b141d9c82ce0da2a97fdf2ef290bc0e76fc5abbf14c53d2f51bd6582025bb7d48238fff5eee33472ea70826e547441e0613bb3e475883a3fb4b2a80fe9894e75714ae18fc459df7b4544847cf5271ad87cceba73f9605ab0ea9ad2bb6d9db296799fb11e515b4090e9dae6aad981187b4e9256ec22db60f2e2a6913208fd7b95a541caa5aca9ff1ef51735e88be619c586fd4be40b709a856560affdf1da1ed7104bff2553a5f7651d3ffb81e85775b64067d525cdd04"], 0x14}}, 0x0) 19:04:12 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000040)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$NBD_SET_SOCK(r2, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1451.862778] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1451.891223] block nbd3: server does not support multiple connections per device. [ 1451.993432] block nbd3: shutting down sockets 19:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000180)=""/16, 0x10}, {&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000000800)=""/85, 0x55}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f00000005c0)=""/63, 0x3f}], 0x9, &(0x7f00000006c0)=""/134, 0x86}, 0x7e8}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1452.041746] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1452.072005] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1452.082343] ext4_test_bit(bit=127, block=4) = 0 [ 1452.092051] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:13 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe000000) 19:04:13 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019140300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:13 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x900}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1452.208241] IPVS: Error connecting to the multicast addr 19:04:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1452.537224] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1452.590380] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1452.614127] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1452.667247] ext4_test_bit(bit=127, block=4) = 0 [ 1452.722065] IPVS: Error connecting to the multicast addr [ 1452.735426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:13 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019150300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x17, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000180)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) r8 = socket(0x10, 0x803, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r8, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00012abd7000fbdbff250200000008000400ac14140f08000500ac1414e03d34b100ac1414214fa646c9339a561c161d377a3523bb14000300fc00040270ce354bbf"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='5', @ANYRES16=r9, @ANYBLOB="000827bd7000fddbdf250200000005000100010000002b00070073797302006d5f753a6f626a6563745f723a7472616365726f7574655f6578658e33c97273300000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r10 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r10) r11 = fcntl$dupfd(r10, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:14 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf000000) 19:04:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20800, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, 0xffffffffffffffff) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) r9 = fcntl$dupfd(r6, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r2, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}, 0xffbdfbff}], 0x148, 0x40, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f000001d0c0)={0x0, 0xfffffffffffffdce, &(0x7f000001d080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edc72826bb0f8cdc1c7b37ba5d1b418d140000f7ee07ba8e5bed146fee130c615a292fbef74508005bef4989355fdc5245cebcb5ac45d588d97dd1e88e8f214ddbb5bd5fe7b7f62cb4066f6b326ba76b70cbba86a705dfcf73fcb8cf1e2e37f3a27a8c27bff3c2cbb0fdb82f58c9ade58175da8fa38b521b879a46fc24ab6cf96065fef69588e024831aac", @ANYRESOCT=r2, @ANYBLOB="0907000000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 1453.073147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=800 comm=syz-executor.3 [ 1453.222538] block nbd3: shutting down sockets 19:04:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f00000005c0)={@loopback}, &(0x7f0000000600)=0x14) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r9) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x6, 0x9, 0xf2e5, 0x100000001, 0x7fff, 0x80}) ioctl$NBD_DO_IT(r2, 0xab03) futex$FUTEX_WAIT_MULTIPLE(&(0x7f0000000480)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=0x2, 0x2}, {&(0x7f0000000100), 0x2}, {&(0x7f0000000140), 0x2}, {&(0x7f0000000180)=0x1, 0x2}, {&(0x7f00000001c0)=0x3, 0x2}, {&(0x7f0000000200)=0x1, 0x1}, {&(0x7f0000000240), 0x2}, {&(0x7f0000000280), 0x1}, {&(0x7f00000002c0)=0x2, 0x1}, {&(0x7f0000000300)=0x2}, {&(0x7f0000000340)=0xffffffff, 0x2}, {&(0x7f0000000380)=0x2, 0x1}, {&(0x7f00000003c0)=0xfffffffe}, {&(0x7f0000000400)=0x2, 0x1}, {&(0x7f0000000440)=0x1, 0x1}], 0xd, 0x10, &(0x7f0000000580), 0x0, 0x0) 19:04:14 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xa00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x900, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1453.418389] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1453.459531] block nbd3: server does not support multiple connections per device. [ 1453.479266] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1453.495782] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1453.537647] block nbd3: shutting down sockets [ 1453.547302] ext4_test_bit(bit=127, block=4) = 0 [ 1453.568265] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:14 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xb20e141ae34ce187) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) r8 = fcntl$dupfd(r4, 0x406, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4001ff) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000100)={0x800, 0x5, 0xbe, &(0x7f0000000040)="d9b93ecc8360e4e884edd741011bb13814e2d0584cc676bd9f3a7db877e6d290044ff72d86971bcba3c10d86e944a8c790d6bdd47c1bba1213095f8f4c13401843ecfe1fa8b85627018d9aea872357cde2e90f16af38bfab34c19b91153669e62532ebe7552720caa38662ad5a7c91b49fd8dfd1ed9bf34f8d37ac4593302c83816cd0f7690983145bb783e3298b7f310dbc69ef6e2eacc5862fcc7da3f82f152fb5496239a9cd59fd57c3a7b7204f3115f19f181859c291465c44247d5b"}) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000180)={0x990000, 0x8, 0x3, r8, 0x0, &(0x7f0000000140)={0x9c0909, 0x3, [], @ptr=0xfff}}) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KDGKBDIACR(r10, 0x4b4a, &(0x7f0000000240)=""/192) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x18, 0xf8c, 0xebc, 0x2e63, 0x200, 0x1, 0x1, [], 0x0, r9, 0x4}, 0x40) 19:04:14 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019160300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x1700, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1453.815376] block nbd3: Receive control failed (result -107) [ 1453.821309] IPVS: Error connecting to the multicast addr [ 1453.823756] block nbd3: shutting down sockets [ 1453.865366] block nbd3: Receive control failed (result -107) [ 1453.879989] block nbd3: shutting down sockets 19:04:15 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x10000000) 19:04:15 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xb00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1454.079795] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:15 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x131000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x84000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1454.146082] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1454.164432] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3f00, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1454.235383] ext4_test_bit(bit=127, block=4) = 0 [ 1454.240604] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:15 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019170300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1454.392296] block nbd3: Receive control failed (result -107) 19:04:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x34000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1454.649284] block nbd3: shutting down sockets [ 1454.725241] IPVS: Error connecting to the multicast addr 19:04:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000090000003c0003800800010001ed3776f6000000140002006970766c616e30000000000000000000080003000000000014000600ff0200"/74], 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x24008050) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={[], 0x20, 0x7, 0x9, 0x8348, 0x80000001, r6}) r7 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r3, 0xab00, r7) r8 = fcntl$dupfd(r7, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) [ 1454.809186] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1454.837536] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1454.843807] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1454.880447] ext4_test_bit(bit=127, block=4) = 0 19:04:16 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x3f000000) [ 1454.904209] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1454.931743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x228100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) setsockopt$inet_dccp_buf(r6, 0x21, 0xc, &(0x7f0000000040)="1013ced5eef19dd141d400f206f51cd59c3c2c3b13f22fa970cc18eb885a4d19a876ee0151613a82a452c9cfa12815faccec736981c29b9885836606ba891029b296ad40e0fb3a31bf6e61762b337bcbaa8208128e5020863db077e8f493c46b742ec069d91d7495d800f413a947bbdf72bc068e27c63c285d3b4d9d519a06b13358e796559e", 0x86) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x288840, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffc38, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r8, @ANYBLOB="0000000000000000000001000000000000000b0000000013001462726f6164636173742d6c696e6b0000a49f7fe2cd08161223d72c577a4a173416d323ccc7ed68f7321bd3d999c66e9f3b6b727e015d150aa29bfec3725b487f995e7845612c8f34397d0a41c473b02274d32f2fd4acc4780e527b"], 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x40) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 19:04:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x400300, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:16 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019180300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1455.100900] block nbd3: shutting down sockets 19:04:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) getpgid(r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) 19:04:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "ba6d89438516bec2", "07ad544c699ecba7bbcc8bf22c623abd", "0f645683", "d5ef2af16ce356c2"}, 0x28) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1455.319988] block nbd3: shutting down sockets [ 1455.365983] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1455.415316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1455.440484] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1455.463093] block nbd3: server does not support multiple connections per device. [ 1455.480092] ext4_test_bit(bit=127, block=4) = 0 [ 1455.488443] block nbd3: shutting down sockets [ 1455.508149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:16 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xb33}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x1000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) accept4$ax25(r1, &(0x7f0000000040)={{0x3, @bcast}, [@netrom, @netrom, @default, @rose, @bcast, @remote, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80000) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:16 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019190300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:16 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x60000000) [ 1455.708333] block nbd3: server does not support multiple connections per device. [ 1455.735984] block nbd3: shutting down sockets 19:04:16 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x10000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) r10 = openat(r9, &(0x7f0000000040)='./file0\x00', 0x42000, 0x24) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "99cef0ce936dcc29", "62e97a6f862416339e311dec44b11f0e", "a2c00e76", "a2741a663c4dd53d"}, 0x28) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1455.975550] block nbd3: Receive control failed (result -107) [ 1455.982777] block nbd3: shutting down sockets [ 1456.020916] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:17 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r11, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x7, 0x10001}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r11, 0x1}}, 0x18) [ 1456.118505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1456.138404] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1456.222069] ext4_test_bit(bit=127, block=4) = 0 [ 1456.262475] block nbd3: server does not support multiple connections per device. [ 1456.270486] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1456.328950] IPVS: Error connecting to the multicast addr 19:04:17 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xe00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:17 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000191a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1456.470380] block nbd3: shutting down sockets 19:04:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x9000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:17 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000040)=0xffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) r10 = fcntl$dupfd(r9, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 1456.820641] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1456.926179] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1456.965732] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x17000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x8000) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$NBD_SET_SOCK(r4, 0xab00, r7) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_DO_IT(r4, 0xab03) 19:04:18 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x9effffff) [ 1456.981176] IPVS: Error connecting to the multicast addr [ 1457.089112] ext4_test_bit(bit=127, block=4) = 0 [ 1457.111917] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1457.131006] IPVS: Error connecting to the multicast addr 19:04:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x7c5001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) ioctl$SG_GET_ACCESS_COUNT(r6, 0x2289, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:18 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc0000000) [ 1457.249046] block nbd3: shutting down sockets 19:04:18 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000191b0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1457.402387] block nbd3: shutting down sockets 19:04:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3f000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3737}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c441}, 0x4080) r8 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:18 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x330b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:18 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc00e0000) [ 1457.648265] block nbd3: server does not support multiple connections per device. [ 1457.673826] block nbd3: shutting down sockets [ 1457.689739] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:18 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() ptrace$setopts(0x4200, r4, 0x400, 0x9) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a8, 0x6, 0x5, 0x201, 0x70bd27, 0x25dfdbfb, {0xc, 0x0, 0x1}, [@typed={0x4, 0xc}, @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@private1}, @typed={0x4, 0x13}, @nested={0x1d3, 0x91, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @fd=r5}, @generic="00a1e76ef519068f6c2ca0eb7bee65f4d1b2ffb74d9fd00011811cff1cecb310808462949936ad47b9227f0e33c76d9796ccf529c4b8662f5dc9aa0b44b876471025e597923e4bc2e4fa5be8feadde7aec8699eecb39e0c69298bea482c14fadbd5ba4343de50e87b7212e8ebc69b632dd3ff5698ae5a9ab87d3f86e6637e962721b73a080d1383edd1fa8d6cead549e141a2283a1c69e28b88ddfcd32160e4d3fcf0b57ca12baf4952c19192248a554280e47c86a18fa1a2cf4ee96a70148457f53af3cb930c5c17f9cc82ce2777e1f53fdcc70370100688686f551354add66664d53a34df2", @generic="4ed20d73576fb7e4b243426964316788d896e9ffcfe803844010e0ffaff6ee60fa7ec12d5a6872d70841c86e5ad7e26ffa1118f24ac50117c4e7ac27960bba0e70b621503fe9851cb4d932ff865b9b8100e5266266b01e635a3ef5cdea495508bedb7f57fdb4510837d22da62faf34e886ca8f49fd07b7150688d75fbf014cba79f8cfbc3e6b6157eb453c2ecb91adce939be9f5038203dc50113633472ba6bbd3c77c0551f98bc72abf539cbbc01cd3409751843cb8443880434a3d893b9dc515a8093c1b837aec0f", @typed={0x4, 0x48}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@loopback}]}, @generic="db8a2acd80f000ee94a294195c00a429cb410e2bf2230e46a875c178460121ed96b6ca246098e5de633489545d1abc2bb32d5b30e70583f22260d57517dd0dbbe14e4ba1ca69659c1d213293ab45e83ad7a32799116760102ce306f2951eda9a38b7dc970fb02603d17ae0dff258879c7b990b497aea00a7adc057c68e7df0a9ec04ba9876fc91e4b4f3f0a6c847acbe1c618871467eaff2d86915bdd57630c012cdd67914bc704eebe5ba7fde72db124acf4ea2ceb0629a19d0d179d6ef9a76896f66df0c347c9809b1acc25291e87da5172e2995fe63b7a5cbd16f0f831e50cd3684ba2bca8cc841d59144fe7ea799", @generic="2cab68ad7611805c078d90e6a23c999c28ceaeda976c6e3a1a1ac162edcdfb32009b2d459f02aec417ba239fcce25821db5e08325c867880194358bc1582c2cfe346a83e3a06727b51be7514d658a71cf1d8e94ec971750f112f47a2", @typed={0x8, 0x4f, 0x0, 0x0, @fd=r1}, @generic="c05d9878ce5b44c6767936a93f881123638789e90a661fdde884be2349568aee25542ff54949d2042bedd137c63d73df09e7827cc6d16404bbbd34b814231f8f2e1673a0649043b0099d51c1e46c82ea"]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$setopts(0x4200, r4, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$NBD_SET_SOCK(r2, 0xab00, r7) r8 = fcntl$dupfd(r7, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:18 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xcf140000) [ 1457.757715] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1457.769225] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x80ffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1457.845323] ext4_test_bit(bit=127, block=4) = 0 [ 1457.896213] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) write$FUSE_GETXATTR(r2, &(0x7f0000000040)={0x18, 0x0, 0x6}, 0x18) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) [ 1457.953863] block nbd3: shutting down sockets 19:04:19 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe03f0300) 19:04:19 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000191c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:19 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xeffdffff) [ 1458.086056] block nbd3: server does not support multiple connections per device. [ 1458.094448] block nbd3: shutting down sockets 19:04:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0xffffff7f, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x4e23, @empty}}}, 0x88) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r9, 0x6430) r10 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:19 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf0ffffff) [ 1458.385367] block nbd3: server does not support multiple connections per device. [ 1458.400217] block nbd3: shutting down sockets [ 1458.524702] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1458.588572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1458.629043] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1458.673808] IPVS: Error connecting to the multicast addr [ 1458.700442] ext4_test_bit(bit=127, block=4) = 0 [ 1458.722904] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:20 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3f00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:20 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xff030000) 19:04:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0xffffff80, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:20 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000140)={0x24, r11, 0x200, 0x0, 0x0, {0xf}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="18012bbd7000c32c6239476721fc"], 0x14}, 0x1, 0x0, 0x0, 0x24008010}, 0x20008010) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:20 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000191d0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:20 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xfffff000) [ 1459.580904] block nbd3: server does not support multiple connections per device. [ 1459.627668] block nbd3: shutting down sockets 19:04:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x7, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1459.786790] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:20 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socket(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x101) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5701}, &(0x7f00000000c0)=0x8) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) 19:04:20 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xfffffdef) [ 1459.832527] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1459.922016] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xffffff7f) [ 1459.993896] ext4_test_bit(bit=127, block=4) = 0 [ 1459.998635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:21 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000191e0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xffffff9e) [ 1460.373441] IPVS: Error connecting to the multicast addr [ 1460.448993] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1460.470614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1460.477250] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1460.491350] ext4_test_bit(bit=127, block=4) = 0 [ 1460.498562] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:21 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x8, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x4, 0x2}, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/12) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r8, 0x4004551e, &(0x7f0000000000)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xfffffff0) 19:04:21 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019210300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:21 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x1000000000000) [ 1460.650993] block nbd3: server does not support multiple connections per device. [ 1460.708231] block nbd3: shutting down sockets 19:04:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = fcntl$dupfd(r4, 0x836db5ef1337f71a, r1) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x9, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1461.057488] block nbd3: Receive control failed (result -107) [ 1461.064863] block nbd3: shutting down sockets [ 1461.081331] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1461.126123] block nbd3: shutting down sockets [ 1461.133566] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1461.147684] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x204000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) [ 1461.186686] ext4_test_bit(bit=127, block=5) = 0 19:04:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x17, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1461.218913] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:22 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019220300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:22 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x4000000000000) [ 1461.288342] block nbd3: shutting down sockets [ 1461.400007] IPVS: Error connecting to the multicast addr [ 1461.564527] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1461.600544] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1461.630561] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1461.677587] ext4_test_bit(bit=127, block=4) = 0 [ 1461.689400] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:22 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x6000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:22 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x800}, 0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r4, 0x80000001, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x4, 0x9, 0x6c, 0xfffffffc, 0x48, 0x3, 0x2}, &(0x7f0000000180)=0x9c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$NBD_SET_SOCK(r2, 0xab00, r7) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x18, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:22 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x40030000000000) 19:04:22 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019230300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1461.938977] block nbd3: server does not support multiple connections per device. [ 1461.962371] block nbd3: shutting down sockets 19:04:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x8501) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x40) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$NBD_DO_IT(r2, 0xab03) 19:04:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x1a, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1462.112700] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1462.192927] block nbd3: shutting down sockets [ 1462.201114] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x80000) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req={0x8818, 0x5, 0x1, 0x1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$TUNSETOFFLOAD(r9, 0x400454d0, 0x1f) r11 = fcntl$dupfd(r6, 0x0, r6) ioctl$NBD_SET_SOCK(r2, 0xab00, r11) r12 = fcntl$dupfd(r10, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1462.240584] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1462.301238] ext4_test_bit(bit=127, block=4) = 0 [ 1462.334600] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1462.374355] block nbd3: server does not support multiple connections per device. [ 1462.424277] block nbd3: shutting down sockets 19:04:23 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019240300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:23 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, r1) pread64(r3, &(0x7f0000000040)=""/4096, 0x1000, 0x6) r4 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r4) r5 = syz_open_dev$ndb(0x0, 0x0, 0x420000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NBD_SET_SOCK(r5, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fcntl$dupfd(r11, 0x0, r10) [ 1462.553339] block nbd3: shutting down sockets 19:04:23 executing program 3: r0 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/112, 0x70) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000100)="3e23cb42dc6c7cc5cd31bfba782a153b622d889922adfcb9950e1c66e18b239796d310880a40600b72ad87556057db1eff9e77e3645e55225224da2903a47d9d5dd17f32313328feb31d7f26d770311efcfbd0b2823e373a15b4a62c403d3d5ddd1869f88887a79fb45b2cc47e44c303f1d73218765a82720dc0849413726220d37afb2292e850") r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000001c0)=@int=0x10000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000000c0)=0x100000001) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) [ 1462.836326] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1462.889460] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1462.896827] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1462.919542] ext4_test_bit(bit=127, block=4) = 0 [ 1462.930148] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1462.967111] IPVS: Error connecting to the multicast addr 19:04:24 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x80fe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:24 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:24 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf0ffffffffffff) 19:04:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:24 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019250300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1463.228426] block nbd3: server does not support multiple connections per device. [ 1463.279081] block nbd3: shutting down sockets 19:04:24 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x100000000000000) 19:04:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$FUSE_GETXATTR(r10, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x6}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1463.424608] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1463.530184] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/101) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1463.591505] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1463.610908] block nbd3: shutting down sockets [ 1463.650969] ext4_test_bit(bit=127, block=4) = 0 [ 1463.674484] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1463.716764] block nbd3: server does not support multiple connections per device. 19:04:24 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019260300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1463.774620] block nbd3: shutting down sockets 19:04:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:24 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400000) r1 = socket(0x22, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) r8 = fcntl$dupfd(0xffffffffffffffff, 0x406, r7) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fchmodat(r5, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 1463.961715] block nbd3: Receive control failed (result -107) [ 1463.968798] block nbd3: shutting down sockets [ 1464.070218] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1464.099845] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1464.109975] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1464.151578] ext4_test_bit(bit=127, block=4) = 0 [ 1464.192717] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1464.202336] IPVS: Error connecting to the multicast addr 19:04:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:25 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x200000000000000) 19:04:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r8, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0f208d46", @ANYRES16=r9, @ANYBLOB="e1e7a55f982700"/17], 0x14}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r11, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r12, 0x2, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x10000000) 19:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:25 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xc0fe}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:25 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019270300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1464.332359] block nbd3: server does not support multiple connections per device. [ 1464.379554] block nbd3: shutting down sockets 19:04:25 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$dupfd(r5, 0x0, r3) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000040)=0x8f, 0x8) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 19:04:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000027c757800d4916897d628ee30145ed8c9a76f3f0752617144e246763b168a5b977100f71d103ecde7329e72e73b90637f62c519a209505a48106aa02223dcba77620ae43ed649d61e19be162fefce685db3c752a8d155226b3936ae2b00d238555e13dd10e4beef00ff47cee14a1660c7b18ae30fba5b7d44de230b33bcb7ac78ffeb277439e637c6f1b7dd0a0409e1dc5b45c3071c3e13ea310f860d86c8c4440a984c1b488d9464ee6e5b2b96b8bf2e17873abd862965fbd1f6101c7bbebcfede51a993fc9a0fa", @ANYRES16=r5, @ANYBLOB="09070000000000000000010000006372592deed0014eb87108f48d1f331734d91e336c1ea76625c8fd5cbcd45fb6198a830562"], 0x14}}, 0x0) 19:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1464.611989] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1464.621130] block nbd3: Receive control failed (result -107) [ 1464.627847] block nbd3: shutting down sockets [ 1464.630833] IPVS: Error connecting to the multicast addr [ 1464.649467] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1464.657655] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1464.688588] ext4_test_bit(bit=127, block=4) = 0 [ 1464.703792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:25 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019280300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x18, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0x3}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r3) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9, 0x80000000, 0xb1c, 0x7}}}, ["", "", "", "", "", "", "", ""]}, 0x30}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="f1ea0ad314d0afefa31445c6acc09e2d20d1dbf8532d819b78cf8eed8e78fed9cfaa3cdd322407b1aca9228698f4fedd9c2e212086d7a48ae3a4c150", @ANYRES16=r10, @ANYBLOB="00042abd70000000000003000000415c7821f00099352f4a2afcd2b7b7907b24e5f51dff7489a56ecdc59676ef9d18bc4051408ffe769660eea12da4c768738323113d7f3bb4d7f4e9b2fd7500417cd6812c52c610e3c0026a88785a3711a52b89b3092922223a7062dbcfc0fdffdea30cab142e30163c0e60603ec9f4416d0d220d20a2cba3a57566bf83b12c51ed274c1520221d43e30ce4f0b16e4ca29f0daccc6e3dee1cb60e5e7a6de4ee04dc5e75ab1591469849d595c11b086a96cbbc188a8492e2b4fd3abc8e6cdf3c0100c031bf16511722ddf480a28e3600"/234], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048000) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4008085) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) [ 1465.056427] block nbd3: shutting down sockets 19:04:26 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1465.308156] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x1a, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:26 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x300000000000000) 19:04:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) fcntl$dupfd(r5, 0x0, r3) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000080)={0xc}) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000001480)={0x0, @can={0x1d, 0x0}, @hci={0x1f, 0x4, 0x3}, @rc={0x1f, @none, 0x9}, 0x6, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000001440)='ipvlan0\x00', 0x3, 0xffffffffffffffa8, 0x4}) sendmsg$xdp(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x2c, 0x4, r11, 0x24}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001540)="c8ed0961799882eb27cc21f3d772985c82d69e2d1922a3f75e61699ba018881cdd71ab521dc2a6cffef5ef8a0b9b15e3", 0x30}], 0x1, 0x0, 0x0, 0x4000}, 0x4008001) [ 1465.361310] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1465.370802] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1465.390645] ext4_test_bit(bit=127, block=4) = 0 [ 1465.434093] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:26 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f0000000100)={'syz_tun\x00', 0x2, 0x3f}) [ 1465.539940] block nbd3: server does not support multiple connections per device. 19:04:26 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019290300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:26 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000040)) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000080), 0x0) [ 1465.674262] block nbd3: shutting down sockets 19:04:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1465.797605] IPVS: Error connecting to the multicast addr 19:04:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ASHMEM_SET_PROT_MASK(r8, 0x40087705, &(0x7f0000000000)={0x80000000, 0x5}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r9, 0x709, 0x4000000}, 0x14}}, 0x0) 19:04:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x400000000000000) 19:04:27 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfc00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1466.328065] block nbd3: server does not support multiple connections per device. [ 1466.374070] block nbd3: shutting down sockets 19:04:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) 19:04:27 executing program 3: syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xf8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$NBD_SET_SOCK(r7, 0xab00, r0) r8 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0xc0a, r9) ioctl$NBD_SET_SOCK(r8, 0xab00, r10) r11 = fcntl$dupfd(r10, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r8, 0xab03) [ 1466.460856] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1466.494934] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x2, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1466.537082] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1466.600420] ext4_test_bit(bit=127, block=4) = 0 [ 1466.625124] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x1}, 0x16, 0x2) r2 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x2a00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000240)={0x4, 0xfff8, 'ha\\', 0x1, 0x1}) ioctl$NBD_SET_SOCK(r3, 0xab00, r6) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r7, 0x808c563d, &(0x7f0000000180)) r8 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x22002) r9 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x9, 0x404000) ioctl$NBD_SET_SOCK(r8, 0xab00, r9) r10 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r3, 0xab03) 19:04:27 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SIOCRSACCEPT(r5, 0x89e3) r6 = fcntl$dupfd(r1, 0x0, r1) r7 = fcntl$dupfd(r6, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r8, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0076bf48a89a7540cfb4d8f06ee15c0ae8a1e3e1759c0924ad2eaa05b77e714ae834de6a4eba2dac5d5c78e9724c653b159c7be3cf159fad0ee821ad70b0c37b772de0ceced648ab7e19183b2f9038c0447262a30dfacb320bed096e7532db46b987a5afe2ed5ce4cfc9546588f8c6c39a65cd32e74dd85ea60a7abf577a934b39d38a9a738ba6ed9f0103dd9067e0fc201eea7426f2ca33544bed3d5290f7eb653e1f9ff867d9cd78b488c64547e1bb84cd4b8c55"], 0x14}}, 0x0) 19:04:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x4, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1466.762931] block nbd3: server does not support multiple connections per device. [ 1466.789626] block nbd3: shutting down sockets 19:04:27 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x500000000000000) 19:04:27 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000180)={0x100, 0xd662242, 0x80, {0x0, 0x4}, 0xfffffffb, 0x5}) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$bt_sco_SCO_OPTIONS(r9, 0x11, 0x1, &(0x7f0000000100)=""/61, &(0x7f0000000140)=0x3d) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000040)={0x1, 0x0, 0x1, 'queue0\x00'}) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r10 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1466.927322] block nbd3: server does not support multiple connections per device. [ 1466.935847] block nbd3: shutting down sockets 19:04:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x680080) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1467.028181] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1467.057827] block nbd3: shutting down sockets [ 1467.082294] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1467.099905] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1467.150671] ext4_test_bit(bit=127, block=4) = 0 19:04:28 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x24040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$MON_IOCH_MFLUSH(r10, 0x9208, 0x9cb) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r11 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r11, 0xab03) [ 1467.184976] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1467.328606] block nbd3: shutting down sockets [ 1467.530833] IPVS: Error connecting to the multicast addr 19:04:29 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfe80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x9, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:29 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192b0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000080)) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$NBD_SET_SOCK(r5, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DO_IT(r5, 0xab03) 19:04:29 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x600000000000000) 19:04:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r4, 0x6, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000180)) recvmmsg(r5, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10500, 0x0) ioctl$PPPIOCGFLAGS(r10, 0x8004745a, &(0x7f0000000140)) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1468.164195] block nbd3: server does not support multiple connections per device. [ 1468.192217] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1468.194227] block nbd3: shutting down sockets 19:04:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1468.265112] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1468.270886] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x17, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1468.347247] ext4_test_bit(bit=127, block=4) = 0 [ 1468.379270] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1468.446588] block nbd3: server does not support multiple connections per device. [ 1468.486695] block nbd3: shutting down sockets 19:04:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:29 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:29 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfec0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1468.667061] IPVS: Error connecting to the multicast addr [ 1468.705526] block nbd3: server does not support multiple connections per device. 19:04:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1468.714819] block nbd3: shutting down sockets 19:04:29 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r9, 0x80000001, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r9, 0xd66b, 0x10}, 0xc) r10 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1468.877286] block nbd3: server does not support multiple connections per device. [ 1468.919055] block nbd3: shutting down sockets 19:04:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xa0000) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000001180)={0x4, 0x8, 0x8, 0xa4, &(0x7f0000000040)=""/164, 0x1000, &(0x7f0000000100)=""/4096, 0x6b, &(0x7f0000001100)=""/107}) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1468.971539] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1469.082534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1469.096634] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x2, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1469.156451] ext4_test_bit(bit=127, block=4) = 0 19:04:30 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7ffe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x240000, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) r8 = fcntl$dupfd(r7, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="d5b40aba", @ANYRES16=r10, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1469.178238] block nbd3: server does not support multiple connections per device. [ 1469.199553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1469.236231] block nbd3: shutting down sockets 19:04:30 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x800000000000000) 19:04:30 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080)={[0x1002]}, 0x0, &(0x7f00000000c0)={r4, r5+10000000}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$NBD_SET_SOCK(r2, 0xab00, r7) r8 = fcntl$dupfd(r7, 0x0, r3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$dupfd(r11, 0x0, r9) ioctl$USBDEVFS_IOCTL(r11, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x4}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:30 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192d0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:30 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xff00}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1469.393802] IPVS: Error connecting to the multicast addr 19:04:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x102, 0x81, 0x7, 0x89, 0x3a}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) r12 = fcntl$dupfd(r11, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r12, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) 19:04:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x4, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1469.546581] block nbd3: Device being setup by another task [ 1469.588158] block nbd3: Receive control failed (result -107) [ 1469.801492] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1469.888877] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1469.905218] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1469.991103] ext4_test_bit(bit=127, block=4) = 0 19:04:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x9, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1470.018982] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1470.124864] IPVS: Error connecting to the multicast addr 19:04:31 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192e0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:31 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xff02}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1470.282937] block nbd3: shutting down sockets 19:04:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 19:04:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x17, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1470.498183] block nbd3: shutting down sockets 19:04:31 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x900000000000000) 19:04:31 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_XCRS(r7, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200005aabb25f26f05ae53c3135ba00020000000074e1eea43e0000000001e0ff00"/52]) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x80) write$P9_RCREATE(r9, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x40, 0x2, 0x2}, 0x400}}, 0x18) ioctl$NBD_DO_IT(r2, 0xab03) [ 1470.653610] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:31 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x30000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1470.767090] IPVS: Error connecting to the multicast addr [ 1470.797452] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1470.823439] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r7, 0x0, r7) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xac, r10, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_vlan\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r11 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1470.885570] ext4_test_bit(bit=127, block=4) = 0 [ 1470.893471] block nbd3: shutting down sockets [ 1470.912984] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:32 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000192f0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x2, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1471.217892] block nbd3: shutting down sockets 19:04:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2200, 0x0) ioctl$NBD_CLEAR_QUE(r4, 0xab05) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000000c0)=0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x800) write$P9_ROPEN(r8, &(0x7f0000000140)={0x18, 0x71, 0x1, {{0x80, 0x1, 0x5}, 0x4}}, 0x18) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffc38, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r9, @ANYBLOB="0000000000000000000001000000000000000b0000000013001462726f6164636173742d6c696e6b0000a49f7fe2cd08161223d72c577a4a173416d323ccc7ed68f7321bd3d999c66e9f3b6b727e015d150aa29bfec3725b487f995e7845612c8f34397d0a41c473b02274d32f2fd4acc4780e527b"], 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x40) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r9, 0x2, 0x70bd26, 0x400, {{}, {}, {0x4c, 0x18, {0x81, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) [ 1471.434391] block nbd3: Device being setup by another task 19:04:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x4, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:32 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xa00000000000000) [ 1471.527673] block nbd3: Receive control failed (result -107) [ 1471.546633] block nbd3: shutting down sockets 19:04:32 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x100000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1471.571572] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1471.597074] IPVS: Error connecting to the multicast addr [ 1471.652654] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1471.664260] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:32 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PIO_CMAP(r10, 0x4b71, &(0x7f0000000080)={0x5, 0x80000000, 0x8, 0x5, 0x100000001, 0x5}) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) [ 1471.700064] ext4_test_bit(bit=127, block=4) = 0 [ 1471.713241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:32 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019300300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1471.851658] block nbd3: server does not support multiple connections per device. [ 1471.892130] block nbd3: shutting down sockets 19:04:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x88000) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) fcntl$dupfd(r4, 0x0, r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x3, 0xb84, 0x5ae9}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r6, 0xab03) 19:04:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x9, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r5, 0x709}, 0x14}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0xfffffffe, 0x0, 0xfffffffb, 0x7}, &(0x7f0000000480)=0x1000020, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003b00)={0xffffffffffffffff, 0x10, &(0x7f0000003ac0)={&(0x7f0000003a40)=""/90, 0x5a, r7}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r7, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/125, 0x7d, r7}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r8, 0x4) [ 1472.112050] block nbd3: server does not support multiple connections per device. [ 1472.152455] block nbd3: shutting down sockets 19:04:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040), 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) fcntl$dupfd(r5, 0x0, r3) ioctl$NBD_DO_IT(r2, 0xab03) [ 1472.264565] IPVS: Error connecting to the multicast addr [ 1472.325783] block nbd3: server does not support multiple connections per device. [ 1472.341473] block nbd3: shutting down sockets 19:04:33 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="cd9db128", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) [ 1472.378224] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1472.379182] block nbd3: server does not support multiple connections per device. 19:04:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x17, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1472.448463] block nbd3: shutting down sockets [ 1472.486697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1472.498719] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1472.518860] ext4_test_bit(bit=127, block=4) = 0 [ 1472.531753] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:33 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r5) r8 = fcntl$dupfd(r7, 0x406, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r9 = fcntl$dupfd(r8, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) write$rfkill(r8, &(0x7f0000000040)={0x2, 0x9, 0x2, 0x1}, 0x8) 19:04:33 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019310300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:33 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xb00000000000000) 19:04:33 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf0ffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1472.844926] block nbd3: server does not support multiple connections per device. 19:04:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x900, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x28, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1472.961138] block nbd3: shutting down sockets [ 1473.037635] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1473.051337] IPVS: Error connecting to the multicast addr [ 1473.059282] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1473.076008] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1473.143410] ext4_test_bit(bit=127, block=4) = 0 19:04:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x1700, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1473.172687] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1473.235876] block nbd3: server does not support multiple connections per device. 19:04:34 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019320300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1473.380403] block nbd3: shutting down sockets 19:04:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5701, &(0x7f0000000040)) r5 = socket(0x2, 0x5, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = syz_open_dev$ndb(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$NBD_SET_SOCK(r6, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) writev(r11, &(0x7f0000000300)=[{&(0x7f0000000180)="76d891391f7c9971f5284b24c39fd254655380050258aa634536b80c2a44874e258eed8335ca8d72bc60fcde72f5d81fb79d6b279d80993be823286f0f9cf45514478bcd0682abc63c856aafcce87cd07efa35268de2c1bb67ee70eb681603c53673b20d90d5b0d0a8ebdb1627821c8eb53d4c64d2e49ce5facb30c727351388571816ae5cc7c746ed513d5587c9fcc6cf304600a2fe901c6839cc80a109d20cf64e8384575d66c702df4f24a84892d973f16427ac1c3bd63fbb69a1552a024c9a8fb280f194ef0460b0336c32af115a991e7fe721e5c000ea6744", 0xdb}, {&(0x7f0000000280)="9b39e7c6f784353132bf473feac9073a685573e23e1f96749de106a2efbeaffc7f7f5ad7a3486d74caefd57b479ce8a0c884aff46df634162478c00e794ad651f57a58436302df8edb683b3cf909a02c3e392c4c4dffbdfc20", 0x59}], 0x2) ioctl$NBD_DO_IT(r6, 0xab03) 19:04:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@local, 0x4e20, 0x9, 0x4e24, 0x4, 0xa93be4facb56475d, 0x40, 0x80, 0x6c, 0x0, r5}, {0x0, 0x7ff, 0x7, 0xc0, 0x2, 0x4, 0xeb, 0x1}, {0x3a66, 0xde08, 0xff, 0x4}, 0x80000001, 0x6e6bb7, 0x0, 0x0, 0x3}, {{@in6=@private1, 0x4d3, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x3, 0x2, 0xa0, 0x100, 0x3, 0x6}}, 0xe8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) ioctl$TCGETS2(r11, 0x802c542a, &(0x7f0000000040)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r9, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="0907000000002e23000001000000"], 0x14}}, 0x0) 19:04:34 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x3f00, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1473.712633] block nbd3: shutting down sockets 19:04:34 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x5, @raw_data="7edc2fdc3e3efcf6e5dbcdfabfcc5a1e443dee78466dbe8664ddb767847992360a0ce481d1e25f4ff628f2b29902092c00db5aebc3c863c997274b20a4628b4e1dd73e8fe4c9582e8f9ea1087fd8796eee91d81cb5b3d703e45007df6c0849e2f09aa453c6dfccce969e21054b0a6a3830cf520d6649c7001482ad2b3c18c3a9ad87a2d6772f13496c9921b32f4c26cc1926eb73fd6dd5982c1a6b01d2cb1596addbaaf1ad22ce4090124734c89bd602a16853db14f0ef9ab649e899ea6733fe69ac1d937b2fc79c"}) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r10, 0x401870cb, &(0x7f0000000080)={0x7fff, 0x10000, 0x1, 0xf29d}) [ 1473.812381] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:35 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:35 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe00000000000000) [ 1473.923752] block nbd3: server does not support multiple connections per device. 19:04:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r3, &(0x7f0000007040)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$dupfd(r11, 0x0, r9) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f000001d000)={0x14, r4, 0x709}, 0x14}}, 0x0) [ 1473.967972] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1474.020494] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1474.033648] block nbd3: shutting down sockets 19:04:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) vmsplice(r7, &(0x7f0000001300)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="be707a27949ac55bd678e0af522baa6881d3577172a24d0a48a10e7ed7efb7c60afced6be94af5ae51e8e67a", 0x2c}, {&(0x7f0000001100)="24ac307657f07e864280c5f38f053498c3bb9c6996f68ec34f7065f2b5e6d243ef2f08a7c5bb0df4c6f194da6708dd8835877ac0e38732629362d9c63cb09a96c69ce94d69d44a3f37512c1bc3997ef646d88eb2af2d9b63299ddd52", 0x5c}, {&(0x7f0000001180)="bdd6fc6568eb21f3effc5f3ad27e99e822060d08f2e0a52c37dfb23d81d46a9d101b2f48b661a109bded04575777f0e1ecb5683e978180644236c17e29a0498b96983f11c0acf5fd4d", 0x49}, {&(0x7f0000001200)="be3e61b988874ad13f218bdde66ad393c82e29963c7fa9a0f1260e0e5788757e8687e6c1fff951471e810bf374a1d2c77f934faba9c8a8a5d1da4755d6d0ecde2d3fd5f9559db121b19a3fd98f7689b446ac86c339d96263e770d06d92285aa2fefebce5ade128b70a31c566fa191f3e1e2edfadbe679fa17935dc76dbaf14d881ae5a61ca1885852a0e23d3712cb0a4d2038652c5941b4ee17e6754a3a424cd9491c77dadf83a576f", 0xa9}, {&(0x7f00000012c0)="eeb0c928af9cabaaf16beb8400f7d36bec14721fcda4c2cb3a7d5318c958263b6205761f0e98872888a1fc1ffc30fc845ba54c532a3f25fc91", 0x39}], 0x6, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1474.080414] ext4_test_bit(bit=127, block=4) = 0 [ 1474.135499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0x2, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:35 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019330300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1474.344614] block nbd3: server does not support multiple connections per device. [ 1474.376739] IPVS: Error connecting to the multicast addr 19:04:35 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1474.409617] block nbd3: shutting down sockets 19:04:35 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019280300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) ioctl$VHOST_SET_VRING_ENDIAN(r9, 0x4008af13, &(0x7f0000000040)={0x3, 0xa6b}) 19:04:35 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf00000000000000) [ 1474.611387] block nbd3: server does not support multiple connections per device. [ 1474.648048] block nbd3: shutting down sockets 19:04:35 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:35 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$AUDIT_SET_FEATURE(r9, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x3fa, 0x10, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6000}, 0x8040) r10 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1474.863094] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:36 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019280300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1474.968930] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1474.978782] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1475.004285] ext4_test_bit(bit=127, block=4) = 0 [ 1475.009019] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1475.014730] block nbd3: shutting down sockets 19:04:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000fff000/0x1000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f0000000040)={0x8, 0x679b, 0xca33, 0x1, 0x20, "673d6e0e4e4644f0a4bf7966f2f90bf19ccbb0", 0x9}) r9 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:36 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019340300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1475.140070] IPVS: Error connecting to the multicast addr [ 1475.164880] block nbd3: server does not support multiple connections per device. [ 1475.181164] block nbd3: shutting down sockets 19:04:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:36 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019280300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1475.333190] block nbd3: server does not support multiple connections per device. [ 1475.351360] block nbd3: shutting down sockets [ 1475.487461] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1475.560613] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1475.569866] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1475.627090] ext4_test_bit(bit=127, block=4) = 0 [ 1475.644347] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:36 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:36 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') r1 = socket(0x2, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x15}, 0x10000}, 0x1c) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000040)=0x9) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 19:04:36 executing program 0: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:36 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:36 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x1000000000000000) 19:04:36 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019350300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1475.829651] block nbd3: shutting down sockets 19:04:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@loopback, @empty, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_0\x00', 'macsec0\x00', {}, {}, 0x0, 0x4, 0x4, 0x70}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3f, 0x1, {0x100000001}}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xb}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x791, 0x3, 0x800}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 19:04:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x9, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1475.989290] block nbd3: server does not support multiple connections per device. [ 1476.012166] x_tables: duplicate underflow at hook 3 [ 1476.032888] block nbd3: shutting down sockets 19:04:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@random={'osx.', '/dev/nbd#\x00'}, &(0x7f0000000080)=""/105, 0x69) r10 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$dupfd(r5, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fsync(r3) ioctl$NBD_DO_IT(r2, 0xab03) [ 1476.115535] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1476.175537] block nbd3: server does not support multiple connections per device. [ 1476.184611] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1476.215814] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1476.254848] block nbd3: shutting down sockets [ 1476.292096] ext4_test_bit(bit=127, block=4) = 0 19:04:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000040)=0x0) write$FUSE_LK(r6, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, 0x7, {{0x4, 0x4, 0x2, r11}}}, 0x28) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r12 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1476.323900] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x17, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:37 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019360300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1476.481860] IPVS: Error connecting to the multicast addr [ 1476.515361] block nbd3: server does not support multiple connections per device. [ 1476.542571] block nbd3: shutting down sockets [ 1476.584379] IPVS: Error connecting to the multicast addr 19:04:37 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:37 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = fcntl$dupfd(r2, 0x0, r0) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:37 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x3f00000000000000) 19:04:37 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x900, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:37 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1476.803187] FAULT_INJECTION: forcing a failure. [ 1476.803187] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.819780] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1476.838351] block nbd3: Receive control failed (result -107) [ 1476.846944] block nbd3: shutting down sockets [ 1476.849630] CPU: 0 PID: 1893 Comm: syz-executor.0 Not tainted 4.19.124-syzkaller #0 [ 1476.859312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1476.868684] Call Trace: [ 1476.871295] dump_stack+0x1fc/0x2fe [ 1476.874946] should_fail.cold+0xa/0x14 [ 1476.878888] ? setup_fault_attr+0x200/0x200 [ 1476.883239] __should_failslab+0x115/0x180 [ 1476.887490] should_failslab+0x5/0xf [ 1476.891218] kmem_cache_alloc_node+0x23f/0x3b0 [ 1476.895825] __alloc_skb+0xba/0x5b0 [ 1476.899475] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1476.904338] ? netlink_autobind.isra.0+0x217/0x300 [ 1476.909290] netlink_sendmsg+0xa2e/0xcc0 [ 1476.913500] ? nlmsg_notify+0x190/0x190 [ 1476.917503] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1476.922741] ? nlmsg_notify+0x190/0x190 [ 1476.926744] sock_sendmsg+0xc3/0x120 [ 1476.930494] ___sys_sendmsg+0x803/0x920 [ 1476.934502] ? copy_msghdr_from_user+0x410/0x410 [ 1476.939297] ? lock_downgrade+0x740/0x740 [ 1476.943471] ? lock_acquire+0x170/0x3c0 [ 1476.947473] ? check_preemption_disabled+0x41/0x280 [ 1476.952537] ? __fget+0x345/0x520 [ 1476.956012] ? ksys_dup3+0x3c0/0x3c0 [ 1476.959743] ? vfs_write+0x3d7/0x540 [ 1476.963483] ? __fget_light+0x1d1/0x230 [ 1476.967509] __sys_sendmsg+0xec/0x1b0 [ 1476.971340] ? __ia32_sys_shutdown+0x70/0x70 [ 1476.975765] ? vfs_write+0x393/0x540 [ 1476.979514] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1476.984288] ? trace_hardirqs_off_caller+0x69/0x210 [ 1476.989328] ? do_syscall_64+0x21/0x620 [ 1476.993341] do_syscall_64+0xf9/0x620 [ 1476.997172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.002384] RIP: 0033:0x45ca29 [ 1477.005600] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1477.024528] RSP: 002b:00007ff7f3284c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1477.032259] RAX: ffffffffffffffda RBX: 00000000004fda80 RCX: 000000000045ca29 [ 1477.039549] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1477.046844] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 19:04:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x81, 0x9, 0xda, 0xd3}]}, 0x10) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1477.054136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1477.061543] R13: 0000000000000931 R14: 00000000004cbf2c R15: 00007ff7f32856d4 [ 1477.084203] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:38 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1477.142887] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1477.167154] block nbd3: server does not support multiple connections per device. [ 1477.176882] block nbd3: shutting down sockets [ 1477.210527] IPVS: Error connecting to the multicast addr [ 1477.240529] ext4_test_bit(bit=127, block=4) = 0 [ 1477.251143] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x1700, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:38 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019370300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1477.473623] block nbd3: shutting down sockets 19:04:38 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x5000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:38 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:38 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x6000000000000000) [ 1477.667040] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x3f00, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1477.726193] FAULT_INJECTION: forcing a failure. [ 1477.726193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1477.738082] CPU: 0 PID: 1935 Comm: syz-executor.0 Not tainted 4.19.124-syzkaller #0 [ 1477.745904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1477.754529] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1477.755266] Call Trace: [ 1477.755295] dump_stack+0x1fc/0x2fe [ 1477.755317] should_fail.cold+0xa/0x14 [ 1477.755337] ? static_obj+0x50/0x50 [ 1477.761216] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1477.763553] ? setup_fault_attr+0x200/0x200 [ 1477.763588] __alloc_pages_nodemask+0x22d/0x2620 [ 1477.763602] ? __lock_acquire+0x6b9/0x4380 [ 1477.763616] ? __lock_acquire+0x6b9/0x4380 [ 1477.763639] ? __lock_acquire+0x6b9/0x4380 [ 1477.763656] ? perf_trace_lock+0xeb/0x4c0 [ 1477.763673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1477.763690] ? check_preemption_disabled+0x41/0x280 [ 1477.763714] ? perf_trace_lock_acquire+0x530/0x530 [ 1477.825526] ? HARDIRQ_verbose+0x10/0x10 [ 1477.829622] ? lock_downgrade+0x740/0x740 [ 1477.832847] ext4_test_bit(bit=127, block=4) = 0 [ 1477.833797] cache_grow_begin+0xa4/0x8b0 [ 1477.833816] ? setup_fault_attr+0x200/0x200 [ 1477.833836] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 1477.838672] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1477.842594] cache_alloc_refill+0x28c/0x350 [ 1477.842622] kmem_cache_alloc_node+0x398/0x3b0 [ 1477.842643] __alloc_skb+0xba/0x5b0 [ 1477.842662] ? __kmalloc_reserve.isra.0+0xe0/0xe0 [ 1477.877235] ? netlink_autobind.isra.0+0x217/0x300 [ 1477.882198] netlink_sendmsg+0xa2e/0xcc0 [ 1477.886295] ? nlmsg_notify+0x190/0x190 [ 1477.890294] ? move_addr_to_kernel.part.0+0x110/0x110 [ 1477.895520] ? nlmsg_notify+0x190/0x190 [ 1477.899577] sock_sendmsg+0xc3/0x120 [ 1477.903326] ___sys_sendmsg+0x803/0x920 [ 1477.907341] ? copy_msghdr_from_user+0x410/0x410 [ 1477.912137] ? lock_downgrade+0x740/0x740 [ 1477.916310] ? lock_acquire+0x170/0x3c0 [ 1477.920313] ? check_preemption_disabled+0x41/0x280 [ 1477.925357] ? __fget+0x345/0x520 [ 1477.928836] ? ksys_dup3+0x3c0/0x3c0 [ 1477.932584] ? vfs_write+0x3d7/0x540 [ 1477.936324] ? __fget_light+0x1d1/0x230 [ 1477.940327] __sys_sendmsg+0xec/0x1b0 [ 1477.944160] ? __ia32_sys_shutdown+0x70/0x70 [ 1477.948592] ? vfs_write+0x393/0x540 [ 1477.952344] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1477.957122] ? trace_hardirqs_off_caller+0x69/0x210 [ 1477.962167] ? do_syscall_64+0x21/0x620 [ 1477.966183] do_syscall_64+0xf9/0x620 [ 1477.970020] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1477.975235] RIP: 0033:0x45ca29 [ 1477.978447] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1477.997395] RSP: 002b:00007ff7f3284c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1478.005126] RAX: ffffffffffffffda RBX: 00000000004fda80 RCX: 000000000045ca29 [ 1478.012562] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1478.019853] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1478.027142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1478.034436] R13: 0000000000000931 R14: 00000000004cbf2c R15: 00007ff7f32856d4 19:04:39 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019380300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1478.481189] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:39 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x9effffff00000000) [ 1478.557744] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1478.591103] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1478.636437] ext4_test_bit(bit=127, block=4) = 0 [ 1478.646895] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:39 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019390300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1478.755585] IPVS: Error connecting to the multicast addr 19:04:39 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34002, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34003, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1479.040447] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1479.091115] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1479.120379] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1479.172055] ext4_test_bit(bit=127, block=4) = 0 [ 1479.193815] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:40 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x6000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x4, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34004, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:40 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000193a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:40 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc000000000000000) 19:04:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x3400a, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1479.610642] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1479.651735] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1479.681943] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1479.721449] ext4_test_bit(bit=127, block=4) = 0 19:04:40 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x9, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x3400e, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1479.742426] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:40 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000193b0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x3400f, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34060, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1480.196297] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x17, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1480.246141] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1480.252120] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1480.297161] ext4_test_bit(bit=127, block=4) = 0 [ 1480.316355] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1480.519638] IPVS: Error connecting to the multicast addr 19:04:42 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x7000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0xf, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:42 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000193c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:42 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xc00e000000000000) 19:04:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x900, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0xc0, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0xec0, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1481.532280] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1700, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1481.621122] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1481.640770] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x33fe0, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1481.714874] ext4_test_bit(bit=127, block=4) = 0 [ 1481.733062] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:42 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000193d0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1481.851488] IPVS: Error connecting to the multicast addr 19:04:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x2000009c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x7ffff000, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1482.412761] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1482.456593] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1482.467274] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:43 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x8000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x3f00, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0xfffffdef, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:43 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xcf14000000000000) [ 1482.534451] ext4_test_bit(bit=127, block=4) = 0 [ 1482.557309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:43 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000193e0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x34000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0xb, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x102, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1483.037675] IPVS: Error connecting to the multicast addr [ 1483.167369] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x105, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1483.287817] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x400300, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1483.332955] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1483.415054] ext4_test_bit(bit=127, block=4) = 0 19:04:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x106, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1483.465854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:44 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:44 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xe03f030000000000) 19:04:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x108, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:44 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019480300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x109, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x1000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x10a, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1484.029000] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x10b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1484.131422] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1484.150494] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1484.192679] ext4_test_bit(bit=127, block=4) = 0 [ 1484.233529] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:45 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x2000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x110, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1484.331530] IPVS: Error connecting to the multicast addr 19:04:45 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000194c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1484.793740] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1484.853566] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1484.859340] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1484.893587] ext4_test_bit(bit=127, block=4) = 0 [ 1484.898385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:46 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xa000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x2, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:46 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xeffdffff00000000) 19:04:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x4000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:46 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019600300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:46 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x20, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x5, 0x4}, 0x0, 0x0, &(0x7f0000000300)={0x3, 0xf, 0x6, 0x2}, &(0x7f0000000340)=0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x100000000}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r6, 0x10, &(0x7f00000004c0)={&(0x7f0000000180)=""/211, 0xd3, r7}}, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20040001) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r6, 0xc008551c, &(0x7f0000000540)={0x4000400, 0x4, [0x5]}) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x3, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x4, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1485.940778] block nbd3: server does not support multiple connections per device. [ 1485.957340] block nbd3: shutting down sockets 19:04:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x50b482) r1 = socket(0x29, 0x4, 0x40000200) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830a00000016000a00", @ANYRES32=r7], 0x4}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c014}, 0x4008001) r9 = socket$netlink(0x10, 0x3, 0xc) fcntl$setstatus(r9, 0x4, 0x400) [ 1486.107970] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x9000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xa, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1486.190498] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1486.243141] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1486.277312] block nbd3: Receive control failed (result -107) [ 1486.287009] block nbd3: shutting down sockets 19:04:47 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xf0ffffff00000000) [ 1486.364375] ext4_test_bit(bit=127, block=4) = 0 [ 1486.403464] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1486.469859] IPVS: Error connecting to the multicast addr 19:04:47 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xb000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xe, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:47 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019680300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x58000) r1 = socket(0x5, 0x800, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x448800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r10, 0x0, r10) r11 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x17000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:47 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x101a41) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket(0xb, 0x6842c8697efbc46c, 0x80) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) ioctl$TCSETA(r9, 0x5406, &(0x7f0000000040)={0x9, 0x49, 0x8, 0x7fff, 0x10, "6fa2a14f1044c5f7"}) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f00000000c0)=""/184) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x60, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x3f000000, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1486.950293] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1487.021720] block nbd3: Receive control failed (result -107) [ 1487.029034] block nbd3: shutting down sockets [ 1487.048637] block nbd3: Could not allocate knbd recv work queue. [ 1487.063279] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1487.087509] block nbd3: shutting down sockets 19:04:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VT_GETSTATE(r4, 0x5603, &(0x7f0000000040)={0xdf5, 0x7, 0x100}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) ioctl$KDSETLED(r9, 0x4b32, 0x0) r10 = fcntl$dupfd(r6, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1487.125807] IPVS: Error connecting to the multicast addr [ 1487.129144] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:48 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xff03000000000000) [ 1487.203379] ext4_test_bit(bit=127, block=4) = 0 [ 1487.213145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1487.255914] block nbd3: server does not support multiple connections per device. [ 1487.272404] block nbd3: shutting down sockets 19:04:48 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xe000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:48 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000196c0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r11, 0x80000001, 0x30}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000000040)={r11, 0x9b, "13cde7ff16af156178bc4c7d6a4b05b33d2c3b7b354293fec530b6f30bb92f81c8c483ba92aed5a0b49a28a4583bd154cb3605aebe011dffa488d2a697a8410623bac155b005004a667b1567aaade97ffa778ee1d596580e4e6725ed8628220df087b4a860061cac4e54bd6de42d90084a93dbc9c75a7e8ba871165985fe3965bc3ca02be4252c110a39270badb5b78c2dd820b67b467a93d56271"}, &(0x7f0000000100)=0xa3) 19:04:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x80ffffff, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1487.440027] block nbd3: server does not support multiple connections per device. [ 1487.499754] block nbd3: shutting down sockets 19:04:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xa00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x480) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000040)={0x72, ""/114}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1487.551850] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1487.637000] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1487.696933] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1487.716691] block nbd3: server does not support multiple connections per device. 19:04:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xe00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffff7f, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1487.769059] block nbd3: shutting down sockets 19:04:48 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$IMHOLD_L1(r7, 0x80044948, &(0x7f0000000040)=0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$NBD_SET_SOCK(r2, 0xab00, r9) r10 = fcntl$dupfd(r9, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xc) [ 1487.800561] ext4_test_bit(bit=127, block=4) = 0 19:04:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xec0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1487.848420] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1487.876475] IPVS: Error connecting to the multicast addr [ 1487.981543] block nbd3: server does not support multiple connections per device. [ 1488.024027] block nbd3: shutting down sockets 19:04:49 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xffffff7f00000000) 19:04:49 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x10000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:49 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019740300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xffffff80, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:49 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4000, 0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r5, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x4, {0xfffffffffffffffc, 0x58, 0x0, {0x1, 0x6, 0x800, 0x80, 0xffffffffffffff4d, 0x0, 0x3, 0x5, 0x100, 0x1, 0xfffff334, 0x0, r6, 0x3, 0x80000000}}}, 0x78) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r7, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) r8 = fcntl$dupfd(r4, 0x0, r4) r9 = dup2(r5, r8) ioctl$BLKRRPART(r9, 0x125f, 0x0) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r2, 0xab00, r8) r10 = fcntl$dupfd(r8, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1488.483659] block nbd3: Receive control failed (result -107) [ 1488.492777] block nbd3: shutting down sockets 19:04:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x1b4e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1488.590245] block nbd3: Device being setup by another task [ 1488.625519] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x3f00, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1488.656438] block nbd3: shutting down sockets 19:04:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1488.710947] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1488.749726] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:49 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xffffffff00000000) [ 1488.891456] ext4_test_bit(bit=127, block=4) = 0 19:04:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x4e1b, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1488.911889] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x6000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1489.018153] IPVS: Error connecting to the multicast addr [ 1489.122779] block nbd3: server does not support multiple connections per device. [ 1489.130889] block nbd3: shutting down sockets 19:04:50 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x330b0000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:50 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xc00e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:50 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0xfffffffffffff000) 19:04:50 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fcntl$dupfd(r2, 0x0, r0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924a17, 0x0) [ 1489.425053] block nbd3: Receive control failed (result -107) [ 1489.435371] block nbd3: shutting down sockets 19:04:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:50 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r9, 0x10, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @local}, 0xffff0000}}}, 0xa0) [ 1489.501025] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x34000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:50 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x25, 0x800, 0xffffffff) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, &(0x7f0000000040)={0x800, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e24, @loopback}}}, 0x108) [ 1489.600127] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1489.620218] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1489.704882] ext4_test_bit(bit=127, block=4) = 0 [ 1489.757128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1489.794896] block nbd3: Receive control failed (result -107) [ 1489.804165] block nbd3: shutting down sockets 19:04:51 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3f000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x400300, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x28) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:51 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000700e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1489.982767] IPVS: Error connecting to the multicast addr 19:04:51 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000001600)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x7}, @op={0x18}, @iv={0x50, 0x117, 0x2, 0x37, "51928b07b050a60149556f3aafae3bc04abe07c1910c34b6c5a6b045010001000000dbc10758eeadccd66b17a050058e683e633a8758f5"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0xc8, 0x4c801}, {0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1ff8aef77d4e6ae212d67a163dcb9d29a74e41391c53213e68bc50786a0a3ac1d15f59e6bf9fe0c7f6d76848ff99080d73453a3343ca155369abf84351feb8384d804a66508ea3c2c632f2dfaf15", 0x4e}, {&(0x7f0000001280)="6f9bf837a2c553c1182d2b5c3157b7e9bf3b0fbaf4181990a2fe1f5cc7e594cbbd1df76b34a55deff9a0b9f33cd350ccbf7e739f7ec4866f0bf5f88f33be5cee63b8d78c4dc791d291b57d99b2230c84059c59121404157c2ff01aaf5af9dd725a2e57a3ea96dc4c762cd3dbddd17461fa8a55e67bec5daf0b77fbf60ca382a7520f00bb3c89bf9343152fc41525fcc62b99c7b7f17a457b15ffb892637907770723e19d2d7fb3a068dbafe7", 0xac}, {&(0x7f0000001340)="2f16af067ce367fc96524d6ea57b66afb3fd0c9e3702fb3caac6a429d3c0cf3e9acb3ccc0e46edc43d7541869ca6d1a1ffe30ee64bcc9882d7c7822313d1cac89edb0fb08fc9448905f87ef11469d3509560571834746e26ebebc7a2877614cce7fac90cb9b6ac0ad83c95256d94bacc707bae88e71f861941029d00111b7773a5228db4bc4b18ac71e0545e5bb201445cdc96af4cb98f78d75c54d8c8d028e873d66eef0ff7e51cd623947f6949b9e545a676b725749feafc1dedd9da3ec4b960ff35850bfd3f32cf376c83dcf779d5fd8b238e3d89c80bf1ec1ebbb944fa42de4b6385e2796211e729d151761cd7549edd640434086d07288fc95182", 0xfd}], 0x3, &(0x7f0000001440)=[@iv={0x60, 0x117, 0x2, 0x4b, "f6fa38d9b10532709c41f497fec3d5c7f4775a1d20bcf42d0f76fd6a147c8a68233e886abe37b0a16f9778a69c38f7cb4578866dc7f05ce3390b649cb3df945a6dc754d51b55e55c3a4adb"}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @iv={0x68, 0x117, 0x2, 0x4e, "2b430b8928b9b8f3484358d5679f5780fc6501046e24a0bc1b2934e560dbf415c629b4002fa7558c2bc9626e27c8e67cf0a94a9d991a29ebb9e055d07fd19e82576a24a55d13ea4fc4a743e63eef"}, @iv={0xc0, 0x117, 0x2, 0xab, "c93b03ed6be3d4580ecea692d44ba735034ef1b1c001a2a480b530ab3e8d308dfb3d49a1bfd28f767df7a0b9b15b2e2c6ff160bfaf4846947cfec20c010f3816e6e5adef78a1e9a69622f0d3aa0a34a39da66a0499295c593b367718391dea3718aa79ac7bcb75eb7bb6efe09015262832054b791268f8f94e2bae7063b7cc2c34ef241b198011668b8a2460c747fe024de06585bd746cc7d2be8236f3cbe9dcf014769c846b13bb0275f8"}], 0x1a0, 0x20048000}], 0x2, 0x20000085) 19:04:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf0ffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x9]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:51 executing program 2: r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:04:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r8, 0x0, r6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f0000000040)={0x0, 0xfff, 0x0, 'queue1\x00', 0x81}) r9 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r10 = fcntl$dupfd(r9, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000100)={0x9, 0x8, 0x8, 0xffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r5) r11 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x1000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1490.282525] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1490.332868] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1490.368945] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1490.430172] ext4_test_bit(bit=127, block=4) = 0 [ 1490.443656] block nbd3: Receive control failed (result -107) [ 1490.458517] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x2000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:51 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000b00e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1490.614212] IPVS: Error connecting to the multicast addr 19:04:51 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x40000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1490.677302] block nbd3: shutting down sockets 19:04:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x3000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:51 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x6fe842) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x17]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1490.842983] block nbd3: Receive control failed (result -107) [ 1490.849793] block nbd3: shutting down sockets 19:04:52 executing program 3 (fault-call:11 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:52 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="099d503257ce322afc4f65183378b20332b3ebd25ecc0f80ce4c12c1f3a5232a2c4a7b9c79e6946abfad7e176114bf158631e8b9c6e058371d10b4bd7e6e02cff25cebb8231a0824f184b771352c752100c2ec", 0x53}, {&(0x7f00000001c0)="5d94b5e143f3e866841cdc6837386ea9b94af0a969165c5e5cca116d9dc2d92e28d39f57825d11134a2cd6f38aa4fbf379a64297649f15b97207f8703074f90da8f4cdd53834909c1778cdba3c9a381681ce8829ae6fa2e4f659782118432112b2e911274d6cda9b31539d6ec99915908e6e40bbb543b528e9caa7770210dba0a3a1ad163980fe0b042b624142901287e8855f83f1c824acc408f12717b22d12cd4376dae71abf52f503077b635054a44e97ca5864daf7b83b80c2316537af48777cc795698f03ed5908d4b1858a54b53633262c5ffd10b84c66116a39f8f224afd06ead1861ecba238ebb19053360fce4a728ced1b55f23efb7009d9a78e8b115456e93448a01acaa6cc1ba74484eef554ef475918c3a7de382dee969477085909ff8df220a0002f57ebbe417a7f77dcccf3ea3f1abb96b4e81a3ef2ca78e320c231fee133014013429f6d900459b2140ad4047e8a12d89ea42263d1ef467644b71f2a4432e800970807dd8e95f41235f924f96e4c2d9a16ef0d5d3619583f280a2e4dd402156712b5fc242bf0a865fd138e54aa912c2aee3470dde599c1db3009a35641159341401a699c98af2b375b35c183c184b5547aaeb4633c90282dfacfee8715aad3067f2eb2efdf1aff5f3bb44da36fa4b56cab6eaee6e75e02ece8c916b355dc27ec0d30cde6c174f5f34961b93e8b0502dbbdc3e161758e45844c60d63ae395e267d77f85551d0f1471adc1195d3ab7803b3afdc20ad8cd2155d70239b073785315da80fcd5a85e22d05f04f4c76f6841ec0177cb0a39dde884fb4e9e0f260701abc3b40dd8ea750c29656fda7d760485c892235ece3f9c32af9b5f58f833ad107b1a5c6aa5d768d9d20af3b1b5bba9f8ddcd481ee1a9bc28e6af7fee9d1f3f6d524cd44e360785d88fc98c23a487d56dac97923cff2b6b8182f549e0e1d7f3aaed927b002497991b39e8188c4e3d3b43e2a6d79c7b10cab05655fc58465a9f2e7869a485a10cdde93114eedba9eb410d519319a62300ecc4f9994695b13b7f8565af5182b31fe88671653ec145dfd826f42c9c533f51e44612d770df67b036fa223bfe4b97968ad89a6dc9165c789311761fe3929ba887f3abf96a4a7fe62af655cbc848ea537e0884c909650fa05473e7dc3b97907527807ddd55efc65d8e33e424ed395b6d7feda6cf6ddb8b1a8c09309743cde77078f01d7dcc590ec6261f406f5e4f0602c47b38048aa6b2110744fea3484af14a5e7132dc0a81a3d65bba2835b8f6505c2923f5a3935a2db7dad6223a570340f08078f941fb8b14d7991580ff26ffdd03852d958dd94e5f7beadc3981c4ded203de0f6ff10732c071254beaeabeb52b0104ece65f8ae5b682882935577701bbca550d013b332cafabf0a810079f3dc223a942c20d279b404257aa73aa202f784cd1c3b68b1885026b6329670e8628ebde8d1ba158a8f4a0ec658b74d0e0518827ceb8d35a4c503c074b9990a4d2c361a6a7e72f60471dba14ab97a1b46aaf2048665ae14defcccadbd8308118aa2269056b2ac9ef96947acb5069f1b8065ebed9a2f42a1795a8bf110cf3e0b02c98dae694fa9dee871993c646514a4e316917c3241a424a3e3b2a2a741d2f7f901de35f7d2ec037d0d1e11c1847bb9ff0b3203e44ae2f4441928034b97699e6383ffdc5fca9de692c78f1195d51a7b44df53f694634b8f4e6c1820c9c65e695fc6ab64aedb01a63a2bcfe7a7a030922f9905ed739fb8c564e27f4f5ffda661995ad094192e4c69d6ed7b47509ad4fa2449e693da53c380bfe197333fd453ceeaa44c701681babcf0756c24dbf45c04eab0149a68ee3719da0ef5f301addf51956916e56110fcdb225f63b7d04ad2caa5af5c44e7b918075f6084939aa0146f3372dbf18cee7c0200f259ca2f2cc5d1d6bd9744d5b8df24abefe44a1c58295eff3adf539b23d61f33df22142328313c442b83152da30f40829070fcecc9c2d12872bbc95dba8d35baf3deb8eae5bf95b1730831adfeb0c2627a72f7f500c7ca8d94c10a01bfb7d9d1fccbd1c3dfa1ddda42fa076b61a17aab23b3f1728adc105f353f7f3d48e3933ab98e289518b093ee0edb504bc109c14e556835a249238b21959fc77fb3f9f1fb06bdfdfdc1214cd1ce6ad89ba9c36c21883bf4d9a9a9c76a21191fe5b4aba015a4d956e0026c701cd8c589500c80cb301c7c7e7899a308f03c6124e937532fc736771e75950256c1b125bb353124b00ded5a23c2524a4cbe81d197d914daea811365aa0d41dab7722af6a90dc8562d8a51190ffcc69dae34657b80168fce6ab3f6feaaa3d3a6386417bc5c3e28597ae4369f96cebc337e697b46ed94a09913b15e31bab567e4097c1b77422e0ccf6b3187a19b3cf2f74a37d7035fe35a9ca92ba92728fd941b483078825c39446031335deedca002eaa3a667f0645615408aec44601857872ebf27f1b172c0e26c8776ec5c366a6710aa94cc43d22338c586ce6c672aba1e0323975498841261a83e0b240a0894665f85cfd1aacaa2398f5533b09ad0c9f424eea6bd17ae823043f90d2dc5a21c3f6ccb36c73c736451b2bbf60004231ea92bd2a2f52ad4c4a1fcb8114786d61b1cf69cb191453ee9829afa9e8835abbd964d6f95a415acea9d949acc1947a47e6110c55bbe9b0d2bc88447a3f676f40459cb875e4800e36e4da9a978a9e9005883253ca17afd1d6c3b037cda47ed70e1a187d82dc6c02ea7aca7f97336f1cb5bcad7187b570c0430aa0ecf5e8a51d1c801c3ce07cf1cd918c37e489910f4438126f31b820fcb1e801063941055721104d13f2ecf2a7d1e086556c31b5c404de119595631e2ba0f2d4e17267b54a5461c2afcc21d9dfef1d0d3fa270040635c2a81e990b8595e9943ca3a793ad6f5cde736443ac7cad8162b44b33b79e7a20d5aa5058323e63d55f666c47eb39c555abbcdd25bda111788356e1200105f35a76d42354d6742bda988bd92f8bfce4583983d68c86a1b6ae1e7adeebb83d97d0e54675db890afc3fb60963ea93fa56f28a7ebd12c9d2048eb19ab94b5642075ef8ea762bbc4c06de91ac27c70dfefc75f955ad9e6eec636324f90eb1169346bb0c32ced455aff5d99428297290dd8e1ff0d3681494372011acc87d89820789a4e9866b0f734824f3268e62d323f97bb9817285e58333f6b0a46da8a47cab0ec40cd384fa8aa161811bea27808214d17f6b4c622d571a925e91bfcba48ae1df0e1381474349921fde14b6d7d26d0286960f146c919083bb698dea4fb6ed728b295d0d1daeba2b82e2e2b6bcf9f80dafff99588652c75d559fe3762ed3a6b0fd3c0c1cc7767271de43bc0faf4e06d788aefc67066cda1ffc6d00b30fb9e1cc9d7d9e9f7c2379a15e50c1a7702226c1ea9470278550475a85d462ca48f4cd704488b6813b708f3da94ad3dcc668ab568449498ba7a04b1ee95318a177a8eb866c6e37b8cf68a78340520b4ea8b8a9a9edf2846109b82ea70ac4837d71d6342557c5f601dfbdd08de7f2ce351ce7b8f966d9fa864ed0f403466be7f128fa6dc2898131b3c6400d3305dd8454956658fb821cde154107d6e6a45bfbe669bec3e131872c18bdf9e2d7ead569429cc19d2ffefb9e3fce37c04b5fb15a4c9b61637c56cea87e4624b28d35936a841380cc44a39b7670f00a9151fd63694822feafcc127e112eedf970f2fe4864c4e89698f1056f0eabe8e9504250fb40ebb21f521d1d4b571af001e260099099a46aa36741197be102e328902722b1151cdb27c090e2b04ec07fb79ebb3fd53acf02243e92c5e03583b6e911a0b62c91b50cd77e9eb0fb1d7ce07e2476e981def1d0f395cfde95e20e45561a6e215edcda3a60f6317ac3390a4c82c31ae6b0dde76815c09b17d234b324a99fd51ca99d87706329c0586fb470a1fb2cfad1d8180fc836f95a3872d6df52352c60963ac68315abf99fa68e4facf9a6b7dcc048742558fa8c5201226a843d522112e9979dd6cc2ec916c4e871f93f417ff53e863fbd2fcf5aef25d8312e63d968b94de9f10338903bcb08a07f0b6b8aac02e3195d90d8a503713b8dca735c451403418ff830796378680f18f045ff328b701075a228be2f21d8b32c5fb3bc8095adc9877ad96b5825e27a76790ea19d44231a1567d206d32560908c08d5233704e44b134b59a2b8d53bced20d0d0a296affe4623c310313aef73dbd5213d9ba9e10d3fa44eebbb2c0233d7d356e21cef768bef2f64d0c5132d0d5eafabe6a93ed48ef497b16ec25860513ce637023a3d7391fe07663e02bc9be0991eb5c10fd0a064dea899fa8a3bd55c8703ba647f9b87cc2a1897f4bbf55e7823aff4955184db29153b5f5fb8d2fe41807344a320de01905a7ccaace85283fe0bf6eb0da3344b651267758b78d81e460579bf77e610c6e86c24e9679819bbdd7e6c5c0134271405eeeffb74f9c9635085796886d4f1cfed8aac294f2069377539d58be7dbf7deb216ac24d9a219b88976b9aa5e87f1ddb31341b9e6a279cc98df0f7791932ff4186835d8ac0b69f47eea1baf6de943a033cbfd823f03bb9ea9add7de5e66a7bcbeb355dee405520cc4284c85225cc2a97b16daebf821303e99f2e701886c1e61a29c40fd174ccf2158124bb6a75f94f1d2e2a188d4b1ab85bf559521a6935549d65b195833b6eca7aa9171edbda3563f3982cdc6a934e739bebaa8e710c6267e9cb9f7bb3e031f0c0aacb354bdc283324736f3b2e0bbc1837b65cba58e3c1e2fcb2a32f4d1de84570afa53010bbf72e269e79264f9fa0e7ca674736ee3caad192a94d5554427321324c1793bf66cb1f4198d30448b1dbee976772dbd3da9e51f68676819eb3cb2d586fd58697ffeda4bc616127e20cf500c150d899fe7f41286bb53247442e95f2a56a0cfc6303b545d25ae414263fc437dac5a925073be2a77b8324e0519768a3b9038b136d1861ea8c418d5e1c1d723de3e8a24874d2bb69f42f2c470a07b8058e60183d11b5caf4f03f91a616a4aa3d829199f9dea18aed8a206983cb362046872df2566c33d425390f91e29896ea65f8280b3ae896685637fded0b981d5361b1192118b03ff3db16ecb1ec78051302c6bba5899fdfb961227dfe86274381c13c0619dcedfccb0b02dd39171f68d7965f128af1410dc60d6c011808cee34cf6a03a92ed7ee7f517944422cc9113985ab37d4b60e8d7b48db0955ec90fd5d1b0069e9bbd1dd1baa767ae53214013dc0b1e17ce8660cb44a405d2d8c9df7f9ed96118fcd0085f7bbfaf3df3c8b0d5ba53ca9c3fdd0fa5750594b15aab53b2c60930226c21925648e1702645b9d2582aeff7565c49912c964d1bf703daf83db8fad54f735820e3f086ab383acaa121a471937f57914654a50c8b738d2c66dd43e21c345c80c872db8e1a4a089d7406f00ae154abe84cc6afa0006e5d8032fdc7b6a88ce05d60b4b0f007a59c9c9dab214d00df89399f72261df4eafc936145072893eb670fff992ed68f4c967bd1320bddc68568344613515860b472bc528e23524f762166cb8671c9a598ed72ac1d56e8e25ab913f9e14fded333bfe6acc30459057ea2873d110ae8f12fd07cc4cbee19766358e490efc4b76a0add903f38695caab347ef4257e96b327ef9285980675930a85fdb0ca3311e58fc83581b23f6fc9fe22fef43dac4b6ae77b5a36d3fa16d60a30e300c20a84f77f6a7d47dad75734fccece4498ec142ae7d2ef5d7ed3e7a5bbdd971c7720c5c4bdd7f8ee947144", 0x1000}, {&(0x7f0000000100)="bba950b9a77676", 0x7}], 0x3, &(0x7f00000011c0)=[@iv={0x68, 0x117, 0x2, 0x51, "eb7c55953ccab1a57114f2a5a24ecaaa91e6c7818f0aeb13be19dcc79ada53bab9f4ad565301c1ea51f33fc96a445a0afad291caaef6a77164d868113380b8289ca2dd545b18a76b906f8d061b1f188930"}], 0x68}, {0x0, 0x0, &(0x7f0000003400)=[{&(0x7f0000001240)="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", 0x1000}, {&(0x7f0000002240)="5cf731846c5ab8a400aecf4860d7dd9936d8931e1e514711f00e88c4bbccf3901c7a0b00d0cd4b59687f5c54efba526167eb056d482cc60d0d04357ea0e9c4c53c61df07e99e42ac8013b21425e9f6c7bc03c2c206d40b1540d944d03199b8bc48ff8af4baa7806fd8e947c4538d41f7e290f03c4af0b2", 0x77}, {&(0x7f00000022c0)="fc6581c107893b515540e5638b9511dfb2f7ad6364d7af3facc4260b16e4c73661d8c2bd5fbeb9fb7244e88a399a247dc9928f08e5f7c5ba65698b95e580da0f5d66ae85fca6984d228e0ecaf18b7958f45ccb51fedadd97b7450ef522a1f87ee5", 0x61}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="d4a2350ec36f488ecafc766b06c685e8c292ab2a0fa18ea4124737d985df9c910abb67c53e023c6aad843c887345237f75134d6c7e0fffb683cbdfaacbc302358c81a3ea4890d2db7016f0a7c48a33497f18d0464e2c29857eac87e10d093d70c3b66e92810943fdc839b85736a20ee1538a811d32df43ecefe73bdcf292e8fba6b3eca6", 0x84}], 0x5, &(0x7f0000003480)=[@iv={0x38, 0x117, 0x2, 0x81, "78f7ec810b848d37a758c59ddddec24eda120d88e47dbaacd9af631429edfc3f488f2a"}, @iv={0x48, 0x117, 0x2, 0x2e, "a75bb703f46c4966a4fd984f566ed6de71cce876ae7fd1c7a800f6ee649830a86335a4964539ba83ee1c6beaf23f"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x50, 0x117, 0x2, 0x3a, "12914a6d2709ec60a8906ff01f358a142ac68b29b5f661a0cf9a5ee4b18eef4cef50d3bebdb837dc85ff8666931b651fdb68b64477b9b9be50fa"}], 0x130, 0x84}], 0x2, 0x0) 19:04:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x4000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1490.985572] FAULT_INJECTION: forcing a failure. [ 1490.985572] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.056021] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1491.079615] CPU: 1 PID: 2490 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1491.087545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.097268] Call Trace: [ 1491.100154] dump_stack+0x1fc/0x2fe [ 1491.104548] should_fail.cold+0xa/0x14 [ 1491.108755] ? setup_fault_attr+0x200/0x200 [ 1491.113457] __should_failslab+0x115/0x180 [ 1491.117797] should_failslab+0x5/0xf [ 1491.121570] __kmalloc+0x2ab/0x3c0 [ 1491.125228] ? __alloc_workqueue_key+0x161/0xe20 [ 1491.130106] ? nbd_ioctl+0x151/0xb80 [ 1491.133840] __alloc_workqueue_key+0x161/0xe20 [ 1491.138444] ? __mutex_lock+0x30a/0x1300 [ 1491.142644] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1491.147835] ? __mutex_add_waiter+0x160/0x160 [ 1491.152337] ? HARDIRQ_verbose+0x10/0x10 [ 1491.156422] ? avc_has_extended_perms+0x6f3/0xe90 [ 1491.161293] nbd_start_device+0x185/0xd90 [ 1491.165457] ? security_capable+0x8e/0xc0 [ 1491.169625] nbd_ioctl+0x3d7/0xb80 [ 1491.173180] ? nbd_release+0x130/0x130 [ 1491.177075] ? avc_ss_reset+0x180/0x180 [ 1491.181155] ? lock_downgrade+0x740/0x740 [ 1491.185312] ? nbd_release+0x130/0x130 [ 1491.189213] blkdev_ioctl+0xbf7/0x1a0a [ 1491.193197] ? blkpg_ioctl+0x9d0/0x9d0 [ 1491.197889] ? perf_trace_lock+0xeb/0x4c0 [ 1491.202591] ? check_preemption_disabled+0x41/0x280 [ 1491.208513] ? perf_trace_lock_acquire+0x530/0x530 [ 1491.214777] block_ioctl+0xe9/0x130 [ 1491.219110] ? blkdev_fallocate+0x3f0/0x3f0 [ 1491.224244] do_vfs_ioctl+0xcda/0x12e0 [ 1491.228337] ? selinux_file_ioctl+0x46c/0x5d0 [ 1491.232866] ? selinux_file_ioctl+0x125/0x5d0 [ 1491.237371] ? check_preemption_disabled+0x41/0x280 [ 1491.242879] ? ioctl_preallocate+0x200/0x200 [ 1491.247399] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1491.252694] ? __fget+0x345/0x520 [ 1491.256162] ? ksys_dup3+0x3c0/0x3c0 [ 1491.259894] ? security_file_ioctl+0x6c/0xb0 [ 1491.264309] ksys_ioctl+0x9b/0xc0 [ 1491.267776] __x64_sys_ioctl+0x6f/0xb0 [ 1491.271687] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1491.276299] do_syscall_64+0xf9/0x620 [ 1491.280128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1491.285328] RIP: 0033:0x45ca29 [ 1491.288536] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1491.307633] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.315365] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1491.322645] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1491.329918] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1491.337888] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1491.345161] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:52 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r6, @ANYBLOB="2c9680"]) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000100)={0x3, @default, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = fcntl$dupfd(r9, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet6_int(r10, 0x29, 0xef, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) 19:04:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xa000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1491.442356] IPVS: Error connecting to the multicast addr [ 1491.442439] EXT4-fs (loop4): orphan cleanup on readonly fs 19:04:52 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x60000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1491.490696] block nbd3: Could not allocate knbd recv work queue. [ 1491.502817] block nbd3: shutting down sockets [ 1491.510486] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1491.542525] ext4_test_bit(bit=127, block=4) = 0 19:04:52 executing program 3 (fault-call:11 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xe000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:52 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000f00e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1491.575825] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:52 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6erspan0\x00', {0x2, 0x4e20, @remote}}) 19:04:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1491.760284] FAULT_INJECTION: forcing a failure. [ 1491.760284] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.833152] CPU: 0 PID: 2520 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1491.841004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.850549] Call Trace: [ 1491.853164] dump_stack+0x1fc/0x2fe [ 1491.856859] should_fail.cold+0xa/0x14 [ 1491.860769] ? setup_fault_attr+0x200/0x200 [ 1491.865121] __should_failslab+0x115/0x180 [ 1491.869727] should_failslab+0x5/0xf [ 1491.873482] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1491.879026] alloc_workqueue_attrs+0x60/0x100 [ 1491.883986] __alloc_workqueue_key+0x18b/0xe20 [ 1491.889734] ? __mutex_lock+0x30a/0x1300 [ 1491.893815] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1491.898847] ? __mutex_add_waiter+0x160/0x160 [ 1491.903538] ? HARDIRQ_verbose+0x10/0x10 [ 1491.908150] ? avc_has_extended_perms+0x6f3/0xe90 [ 1491.913107] nbd_start_device+0x185/0xd90 [ 1491.917274] ? security_capable+0x8e/0xc0 [ 1491.922067] nbd_ioctl+0x3d7/0xb80 [ 1491.929161] ? nbd_release+0x130/0x130 [ 1491.933602] ? avc_ss_reset+0x180/0x180 [ 1491.938033] ? lock_downgrade+0x740/0x740 [ 1491.943524] ? nbd_release+0x130/0x130 [ 1491.948745] blkdev_ioctl+0xbf7/0x1a0a [ 1491.952649] ? blkpg_ioctl+0x9d0/0x9d0 [ 1491.956548] ? perf_trace_lock+0xeb/0x4c0 [ 1491.962107] ? check_preemption_disabled+0x41/0x280 [ 1491.967160] ? perf_trace_lock_acquire+0x530/0x530 [ 1491.972224] block_ioctl+0xe9/0x130 [ 1491.975872] ? blkdev_fallocate+0x3f0/0x3f0 [ 1491.980301] do_vfs_ioctl+0xcda/0x12e0 [ 1491.984211] ? selinux_file_ioctl+0x46c/0x5d0 [ 1491.988724] ? selinux_file_ioctl+0x125/0x5d0 [ 1491.993237] ? check_preemption_disabled+0x41/0x280 [ 1491.998273] ? ioctl_preallocate+0x200/0x200 [ 1492.002980] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1492.008926] ? __fget+0x345/0x520 [ 1492.012596] ? ksys_dup3+0x3c0/0x3c0 [ 1492.016365] ? security_file_ioctl+0x6c/0xb0 [ 1492.020972] ksys_ioctl+0x9b/0xc0 [ 1492.024495] __x64_sys_ioctl+0x6f/0xb0 [ 1492.028571] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1492.033169] do_syscall_64+0xf9/0x620 [ 1492.037338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.042552] RIP: 0033:0x45ca29 [ 1492.045753] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1492.064667] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.072664] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 19:04:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1492.079942] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1492.087219] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1492.094508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1492.101795] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x3f000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1492.213515] block nbd3: Could not allocate knbd recv work queue. [ 1492.222521] block nbd3: shutting down sockets 19:04:53 executing program 3 (fault-call:11 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1492.297081] IPVS: Error connecting to the multicast addr [ 1492.325915] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1492.351338] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1492.367278] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x4e1b0000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1492.404996] ext4_test_bit(bit=127, block=4) = 0 [ 1492.409733] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1492.433333] FAULT_INJECTION: forcing a failure. [ 1492.433333] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.502757] CPU: 1 PID: 2550 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1492.511039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.520522] Call Trace: [ 1492.523139] dump_stack+0x1fc/0x2fe [ 1492.526796] should_fail.cold+0xa/0x14 [ 1492.530708] ? setup_fault_attr+0x200/0x200 [ 1492.535066] __should_failslab+0x115/0x180 [ 1492.539327] should_failslab+0x5/0xf [ 1492.543155] __kmalloc+0x2ab/0x3c0 [ 1492.546907] ? apply_wqattrs_prepare+0xf8/0x8b0 [ 1492.551610] apply_wqattrs_prepare+0xf8/0x8b0 [ 1492.556157] apply_workqueue_attrs_locked+0xc5/0x120 [ 1492.561303] apply_workqueue_attrs+0x2c/0x50 [ 1492.565744] __alloc_workqueue_key+0x570/0xe20 [ 1492.570623] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1492.575675] ? __mutex_add_waiter+0x160/0x160 [ 1492.580196] ? HARDIRQ_verbose+0x10/0x10 [ 1492.584297] ? avc_has_extended_perms+0x6f3/0xe90 [ 1492.589208] nbd_start_device+0x185/0xd90 [ 1492.593430] ? security_capable+0x8e/0xc0 [ 1492.597616] nbd_ioctl+0x3d7/0xb80 [ 1492.601192] ? nbd_release+0x130/0x130 [ 1492.605194] ? avc_ss_reset+0x180/0x180 [ 1492.609208] ? lock_downgrade+0x740/0x740 [ 1492.613388] ? nbd_release+0x130/0x130 [ 1492.617306] blkdev_ioctl+0xbf7/0x1a0a [ 1492.621229] ? blkpg_ioctl+0x9d0/0x9d0 [ 1492.625161] ? perf_trace_lock+0xeb/0x4c0 [ 1492.629328] ? check_preemption_disabled+0x41/0x280 [ 1492.636302] ? perf_trace_lock_acquire+0x530/0x530 [ 1492.641802] block_ioctl+0xe9/0x130 [ 1492.645886] ? blkdev_fallocate+0x3f0/0x3f0 [ 1492.650281] do_vfs_ioctl+0xcda/0x12e0 [ 1492.654195] ? selinux_file_ioctl+0x46c/0x5d0 [ 1492.658810] ? selinux_file_ioctl+0x125/0x5d0 [ 1492.663425] ? check_preemption_disabled+0x41/0x280 [ 1492.668468] ? ioctl_preallocate+0x200/0x200 [ 1492.672990] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1492.678298] ? __fget+0x345/0x520 [ 1492.681781] ? ksys_dup3+0x3c0/0x3c0 [ 1492.685533] ? security_file_ioctl+0x6c/0xb0 [ 1492.689968] ksys_ioctl+0x9b/0xc0 [ 1492.693442] __x64_sys_ioctl+0x6f/0xb0 [ 1492.697350] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1492.702921] do_syscall_64+0xf9/0x620 [ 1492.706749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1492.711948] RIP: 0033:0x45ca29 [ 1492.711965] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1492.711973] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.711986] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 19:04:53 executing program 2: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)=0x7, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="50351a235b9bf7ec39f4f28babd6d6e6cb4c8798e4cd3fa236cdcf35abc3248b0ae9a0ec5df242e11b62be13eb93acc45903200c331f8ef3e6c584787033d7eea6819507e6cd9da0bf1f81573e8e5de7b65bd66c39a268276f560177648965acc69d0a04c626489110b46f694e6cee4699c25e052bfb0a3c260208eac3dd0c953b45c95b0898308fdc9c78bf0b3d29931203080f96cae985b564b9249d41d9e15f9aafbf6aa7095ab7bfae15a0e07fa8f195ef7de2da693b60261a29fea381b18d668eb6c98d70e1a3581b26bbedabe80276549235af42", 0xd7}, {&(0x7f0000000080)="765d2e27dfcdb5bd93b5e5709654d1a485de25782c9614b14744732382701ed47324ee36bff0333961c19582b991f1597ead", 0x32}, {&(0x7f00000002c0)="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", 0x1000}], 0x3, &(0x7f00000012c0)=[@op={0x18}, @assoc={0x18}, @iv={0xc8, 0x117, 0x2, 0xb0, "3b7cb143f8208c1447ebba7dfc7bf6debad7d54db1fbc2b14ae9990359225a1183fd15c93472a7c033fea9af7ebccbf97c6c7fa88495689f224437e88f057a1d52b9cabba26dd53f1074ac071014ce39813d4284f2fa4162a3128ce76fdf9beacd45415fb4a52991e455dd4e0d1df95fa76ab7e759a1d05ec2239e10b7197d7ab1b0aec56cfa328d94b1556d2ee71ab2c0f3a57bec9e5fe9c56c517e55a0d77b6c216cbbbf221b74004e8818871fd755"}, @iv={0x50, 0x117, 0x2, 0x35, "32deac619fb96acdade791e855ccacaf02d792f495e7eba0f6965b0ce86c7b36ddc44a96312e6e8781398f1b64b74c719bf1f49c97"}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x160, 0x1}, {0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000001440)="b3bf23518980b33af7d7b6aa352fd2337bd0fdbbc0ba2f5a509119ff726cc7b15c4ca0813938f51a33c059e758ca1eda018802255f3f880e07485f57d126e575913fdad11e2296f86eb507787e016dbfa3a6c2168d842ca1d3b5fe8e3b25fdbf34498408f9804822a210e626e619c3a3dc807241ee8f400dea6fdae187373da119aebb31a6dc69bf4fe658933b37ba8c2505bca83c99884e794f863d4da048f1e5936933ed90b639859591f6cb66d43886f467464eab78187ff0a601d881fb5d8e9d674bee11ed0dd029ba2c26775d1d4d324eaa7d97cca930d67036aea46824df297b591560d3dfc34aec366b6d45a812b32d09", 0xf4}, {&(0x7f0000001540)="8cccb94232bbb6e18ad4ea745d364e5efb50a9c2c85b4141193ee4e2e42bd03a0ff9b050757cd19edbfa7df21e33d16603c21ad0f2485351724071ec13902234a0c1b7503f29a934affb725048bf7b8bda2d13bf7f0b641965f9e3aadb8f965b825cdb0d5ba2a4dca027dc8bb9c6c900dee5ccd68ba28210b83d30c57be7b3581e70530ca8d831025ca636a3cc52718c56d71ee182a1ba35e751976a862b2248e967d37c", 0xa4}, {&(0x7f0000001600)="7bf275b50b36c58f5353091cbc5b7d5d15f4f8f5a7376d6ecdf9bd7890d2596e796120f5d402311cf1b9783495cf93bdd6d9ab9cbb61ab967ba4f529ca8a8be99afb2d044bcc252f477a6e9cd0a2c44256bd910e11950cd653795aafe94c1f31da97266753058538a411488cdc5da6bc056aa35c094cb27dc6932e2e55236815ac0ec72576cb39f87ce911d043440b63bd3ed290d9fe07a04c9de08764672377c1d8f37a010878476fa53bb2acedd679d83e297dcad3e453b2cdac6316e0c22358cc241c34335c43d1535a1285438a74d7587125984c74f623516fffcb48f76a346d04ddb2feb3dcce8bdeca3a6473f70b03e4a95b020bdb80939f3675b3a8872fc7262b6989a9c11bb79f6e4cfbc29f1d1f9837cb98bbf231270808aaf8817a1d493e7dfea1b7b6916f0aa39e76ec1c1156e19237c2917129db2953151d07d05ff08767ce613d1555ca8b4ebc06c24575c001eaad8866ae7ec1caf5da1d420c333b50fa42fe25c310d90eeca6b4b2f46a608c8daea2b1fd502401ee8eb4dfa11a94080ba7f85da08b96bde95b7b9bc532f94116d0f46205a1acbf8107f1e973889d684deaef5fda8010e8cdbdd0d5691fd48c2183cc8b1dd43c5e7de468a4b804ad289edb0022424f02776e2b7122033d97b0060060049652ca03ab8702142950d2d66343cc1ddaf9e66b40f1149b49dc74def1f14221e77c90432f09640da8a6077634f21a7e96b5ada75fb68117c2ec29aad107f81f04447792adcaee9f9e3f45fc23f19161bcd117f4df934d7a92335a7a04f8e6540fd402c2164c76a8ee79b88c845e89341dc801f90ad5b7d73db7b087f1edf98486ffbc9e080fee643d38ea760c217318b90187dd8751577b57012c31f831af6cf2bccd519ebeff232b558a566090dfbea2b7c95897be2171b57bc630c36c538ed84580bf8873e66536c15ffe8de2f523aa800f499024cc333f3019ab79e2f6c5b253dac0d119dc02af01463be02608042f2e1cc83adb8b25a923a80932eb8e7de8d67d30cc919386ce1205bc27d13a58807f649b46f09366d2672263b0624a6c6a78da6dd0a7158b5c21d0efdff9698a908db843f01ce0dee6e6d0854008d66e30646110bd4078a5708e1146df04633cf0579f8918f0556377f7b16a94706587850e4016bf278bb8aeff38382d03acc2239bb2ccfd7bbf6db4f25d62e7866a65b4b168386fbe7e3e0705dedcf17b97bb9f3d9e2beb04d18d825dd02241a4dd6549e10a90887fd2d198a140a93099e965fe61c671f015aa1c3581361c8d232151e87ee01c6eb4c5f2d1a5022dfe25aa69e4a3d1ce7b8e362cdaf7c349ac1648a4a16b4a0523ae67d9667b8114ed7707b9d58c62c76685ccd16c108dd4ea82d70655542f0a56efba2c3f3d2bb3b12a482e087e94668c482d59b8c8531b8c1b343ff92d3fe6a338d906ee6fcf704d9fc124ec7b60a72aa17c7fab31aef172ac85865fcdeb362858c198e2940e6e60412a19bd33dbcf3c2e627be2073f18473f08f98ebb5b4a111b057eb349cd14ad608e40816b798108d3c3d49523de29297024943fb3dfe2d561896814bb6992540205011a6259c7eef0d5412b30afafe3ea9b9b0017d04bf6d9a370cdc759f413d3069a3661d5e924d5fa6405f31c44a216eef9390024dcbd67be9995ed0eba7b17573f19ea78ebf2268b03aa812df41bf8aa3068a042dade69f37464c56dcf6b1f2e02a52948d1567a2abedb93ac79459de4fa75a3de008565a9f826f666ed64c9417abd1fadc6c9786170a7056eee2005b92174893e1cda72ad631b18c7e0fe823fdec00976d00a6f6b1937081a485243647478c73b32c007a32c80f26c8e177bb1b5b47b952611b37e6abb8b9e4159eebe12f03b64a861d0b5318de8c367ea81978979f357a23ba481d7e5d6ad7d76f8cdf8b85bd84a281d5f20f66513be2392fbb521f7f7cfffb540704ee541a99a2b7135657b731607669645d03c768fb446268cf39fa1e83b4b3d1b677e31ee64785a8ba877779511b08ea8643d2b49474ed81195eccc22577dd5728bf350f641e57c0bf18122e8a971649208895d1f6fb2b34a6e07cc2ddeaff776d134e7ae74488578e3b0bad050284cc2601b3ddd132f03e35c3c14cf163082de795c13f411861a2af89d3b1b7a8f6a3215aa336c14ca6e9dc54658b9ab109f885ade6173f74627e04a0a0e9a7e7149d294b91c08c05afd3a01da8ea1b88cd8103c0dc65611ef820609e486eb15cce0bda8e73f4f6ba21dc79184a2f0f18f296df9e10450821ec191b6b9d9fada14ab6f46b546fa1d381dba74190203eca49c0a51a457866aa9195a820d2e1f28c04e22045d54a1ebc4452f68414baf4569e2784c1054becebd40b5474feab30441c9f1643593df4ff2b9dbf722f87f68d48523cc426754ba6ce218c574cfa283e1e6ea2ef485a4f946e7976d4a4910d97eb290c3b83940090a4eb3613e53c307821fc43d2b28fb817ae2bcd9b999dea64a8d51b67c60dff301283ce38018d236d5c918cb88178f0c68c6341471882e42069214b3439e4e64befbd73e072036239f85034ec8aecd922549cc0a92dc6414a8302466413362a5a55473dddfdb14076184fe07a3fb2b2052693f25b6aa4f64763c88c316d65f5525c49150cfa07c639ff24585c1c202d3c1fd819b2c89e46a462ee37761fd993e82ac9582af4bc30a8fd11cfcbe326f011b5eced517333fd2a62a0aada29eae90a9d7356acce9ad7ffb9b6f6110773f3f6646b9a89ff125588518afc711b309d71ceb7137cf6c219dc8f47b88df018ae7b5210410bc44ce58c35134cf6f9e20d06a7c4d13e06150776fc483cc3947ed872f96415303278f0e449d87436f198d74dc068a34514eab8e34f3f18fe1c6a72ecc13bd29b0a270500c47550b1c7e59758874b7b6375a319fa7999a9d11620d01180869de0b34fee61b15563836762215189e2d7dc4632d8d616b9140a31f4691a888b1aff2aef244893ffe5b1a980cb23a7d62dd61d225decea95232f683ea2ac3c289d7a9894c8d02284d23e734b949faa2478ca9c60855b319c39c946abef33bbcad6f1150044fe29f0d2ac315435e842267b25c03490cb264d3f1ecf20a50ad7169b90cbddb3ca96894506561fa5d01f7fc738299cc3a03f55f640e0cd041f4d75f8b39d358c63ad24620e0656b33010fa3113edb6c8ea6e65591231189e51599e58e5e90a7ba59e8109321f716abc7e4de903db62bd0d83502bcd64f687f2db8fdac2cd1b77f1357c034f636801311e4d932f952265136f6764a90c077a05c20e102ff4733b052375c53d7526b174fcc6aa831ce3c8005e052826131f89cf8d478e616a30a781ab2210ea0821247bae56b32c8c5e5c70ea10b8673a9a475786f91d46690142b70e35d95d045e8a9259b0191f8e0adeb12057615d2b5c7df92c7acda680edbb186d87f05cff6106348ae9a8d4b255865d4e1a6b125ef3596c8c4481e5cab67c0483a27eac74c4830153fc2395989207a2feeee56136735bb5b829329fd66041368e76dc162a74a52ee8a5a0fd7fcdde89757cf04524f678791cfe5bb457dae13b9b094f830d1a133bc4a04b1780c0fa255c849210a60377cf1818d7d82630eb1e888fd1470e026856b9fefcd194e6f7f748fe0a035801e353515f49576c7aaeaa36bc6e6e8b091e11ca933c2644fbea274d504969ac4d99bae901f6dcfc0dd801e8d23c29beea6d4a28308c934c1323e6c0c4103d447b0df5b770f1bd53916f20f63ad2705cc1e2de93025c92e9730bbc40b816ef8de4601b18e790cc5f6c6c800693eac8cf4cadf7dbf44713e969c3c1d171822241588b9ebf95e8d3c3d6ae1a5d33cc14932a170132aa1aaf1828a36699a6c1e6db2760bf29e176bc2a61722a27d12d68bccb0305ea30e3df006bcb82c2b83012b209b860f9bfa6b5fdb4cc088a581931996adecaaf98141bf8e8a60778ca281eb3b224ea42603116f5348b80bea19ae8304be3874eef410174e9d12a648ec0c2041221b5dcb2a28a07214a952baafc006a0b41f45d9263271e35651d1f8fdeaf87295a67b023792520b0a178b8568258db06fa0808c215d24fb90b5b62049fa11046ed38da030359beb4146962d40373a555bc2c334a9096efb8b4de985ae3ee87c6d7b4dca332410614882f2205f58c063f695cd1c36abda0177cca953eb9fde8491c3b3f6a55b14480eb6ef3f25b8a5365d429f572b265321047983b05aaf6beea71adfa5fe073a05adfb19c62f3d63555b9ba7f3300f4b70912a281993e48b52ab43f70b7e774bccb74290ab3053f83b84e335aa284591b74021a12f56a7824e2d75b0f218deed274fd29a9f7769cd336b378e675f5d9b8fcd78a7fa402d16b8c01abb0718f2761b6106f914094fb46b9310a5b7da01257d5bac0021be020f6e2846ee2a946cb01ff60f0265f12dbc99a652f080b3af9e61ae5fe0d4a67386c52d61210e09a3c132ac793eb435badb388ada727c6d49830a6ab5d577cd75b8588b90d7b8ca20d018e62eb8af6c97ee795e8924808d9774cf04bc58f6b6f91d99ffa426ed89066cb8829659cd15878e84593446bcbfda1d46877ac33143fa005616b8baaf73005f691413dd30d85f7c8a1b904a046e2d9f6ac172069b35271baa570d2a2000f5061239919367c61fd9563229033c7cbc0de808d55aa9ce556880f470dc93376483fc99e5f4def0a0da24bf40a0519c0960775db96c07bde41c443f5ed6a5d22203b2b270f5b9d0cbf9c7e81ebdca4409f833d38e327d1535704ff2a3ac9f2339dc713de35182b5d798bd5ad23f6f6c54fa3a806d9ca4e7dc69dee84b78f4912303e71ab94afa83297844fea150161e20f15f4553c22ac156fbfd54e7a59da50dbc97b3bd708537d4166c77d06afeeb3b03266ab827b5996409841fd98b5c13dfa37ee78f42c11c44aa8c3a7f30474bae01fd6e39b6a3c7278bfc58e6d476f15ac55f8d1ea703697d505b18d9ec63b8e1fcebb6fd998b6ec0dbe905685b7e287f8ee7edb49365f3f58b1140242961ccdbf77ddee2e57f06a4a46a19e620a89891051c9ff8148061738cc6c294c708ba8a8687751d964e8e5c8e823e9ee69f59d60f0e72777f9c44203a77dfe65206b51e9295dcda89889d5b1ea50ae02a3b4190d5b076643a63d00e70f433274dd5e5b4f11d92de12a72a3826c6330ac5584d597b4a0d1b0d130eb40fd41676b2d8522cb2d15fc1b38b2799e2385fb9a96808953c53653f67cb7a75c18f0ef99e7f9eca8b1743b4df2e8747433fb265fbff6a9b5bf9366c1e18e356feb0d710593f0cb14152dec864e935a20ad7ee5c8d39ea0ce0ae76aceeec5da26015d6cb6341c0746430146295757921d5dbecef91b68488fae3196eac06225d3a39732ae9e8169c4f93a445ab4a5f108f8bb66611b36738937a1337affa079429fe9f60a2df83b6d88c966229577b61c9a27f7c433a081af49a9b524d6eae0ae6a91389a255ccf841d0807912b5c460cb91840a0652fcbb30cb2770414fa876b251cf0d1da7f74f78de85d00d08b8388e65640fbb853a68b08b0287bd0347055ce506d35c6161aed1d9037923caf82af94f32ed1c85fa56df6441557a84572160ca571c83ed7101c810e298bc7d00eac4b332bb99c1b97b3cc8fb9537940620059d11f2d5685365d6dc67d21005f54c35e6fc5005eb620f995c0b28c2e713ade708793e73ac5adc6b260139d7af4258a0b4fd7c68084f7c0c18ed84e8cd49908e4cac56ee7cf287af649b4023466b2c", 0x1000}, {&(0x7f0000000140)="ff86fdc8b91a3623e607c78f0a9dca0ae6ae5c", 0x13}, {&(0x7f0000002600)="01b4cada7722929182e473d6943a491565ab3e6592d4cbbde17b6be0fb1c0505aa9735ddbc2f89f4ec126e07cbd45bdf2e8513df06", 0x35}, {&(0x7f0000002640)="0bb6ae6bd32df4390fae0cef48f44ce1cc37efb6b638fc6b17d69a506f7c44ff51f92c187510c1f026a899d54b60d6879a83ed73b53871bc4450831668eb32a1d83584f4d1a48debbb3fcbde18e075c66bab8157c57e47b13e741cfb8c8b71dff7db80917e76ab98cfa70e3d62cc2ce638a8", 0x72}, {&(0x7f00000026c0)="c2cfafe3f774e61fba05204b5dae28581815e0f91dbfb3ea80f5e546c122a77c419630", 0x23}, {&(0x7f0000002700)="05512403e8afae9cfb07d3da9450ccccb36f158ccf40b2a85659184e80e5d0b959079c69dcba6b6d3f92af090bf8fe87d03c6a99e28b26982099694217acada2b6371a82a8684d48b597089f792ac840b3dfb4aaa7aad10d22648316e81e19443cff1a6ac36716fc", 0x68}, {&(0x7f0000002780)="23ef8474305e3e163bdb2872c861d30bc16f4d465e07f6dd1e4a802cdacf396c1189027900f2cbd046e67ecd3c66208f045c8b78f6088455467f9a2326423fad79423cbd6338dac8b6c426e33cd7f18dd559122b811b868f92c79579c8284f15f625370e8225b3", 0x67}, {&(0x7f0000002800)="43079605cbe627369b56641285672812ed0c0538acd194a8b35d1a3ede49b3545339793423aef779224f98440a0be1c03c634510187d09a6126921e5053be9b71a6a475db48210a390e50461b9901a2ae1338811a9bfef2ae8b7e1bf4e53d150d80a7058a2a248651721c16ee3e952a25bca99447a75d46819e58451f990ba37a5e4b550051415b867afb00dfd6f42f75301c08a15eb337b835f3d8ba72bfdc4d6669df91fd7825a126b7bf8ed49b405e60e2024c23c40c2231820d529896fa02ff3036e098282773440df93c7978e2862eaae38822594", 0xd7}], 0xa, &(0x7f00000029c0)=[@iv={0x50, 0x117, 0x2, 0x37, "0d493392092bf1179b8da7c7509c69e32a3bc17ad44e0f04e5c6e4071f1bc910d2705efe842f7e614c800efcd25ff1a2f8c46ad06f1f0b"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x78, 0x117, 0x2, 0x63, "6c0a04346c58f8b8ac4926f700e5ab6e3a0203f56d608c8e362f1e946fcd572e48ebad704100be6ca5c4938fbbfc3288e6476ac0e0570b2e8a25e1dc35510330fbc57261c5375bd8234cea0fd2e3584f8cf0e0e9f69d8fe4f6c9e37ed0aed8b0c81191"}, @iv={0x20, 0x117, 0x2, 0x9, "789c62ca0aae735096"}, @iv={0x100, 0x117, 0x2, 0xe7, "4b7849228aa98f3527de3834f762187b8d57473b583132715a9dd051fa2cc50011cc3275e950b08c6def8dcee136987771b20b673bdbde0a2ffc8da1deebf0695df54df987810104c1732cc37f3df2355a994ff41946c309a3223ddb6452570fc59ca428196507425d8660464dcc037290c3f15dd74b50e67e4dfafe69a62fbd134b1cd2c7f8608980c1919fc3e53c8b34a5fe8085bee99512542fb8bd2f5461e699109d97b3a7c170ace569d568da860bdc5fa2790fbf970c2137f19e0c7d5e4ff1ea634d3f7b762e899bb88c38a3491594abe9d596361a95ba9752cb59cf240bd1f379e627d2"}, @assoc={0x18, 0x117, 0x4, 0xffff}, @op={0x18, 0x117, 0x3, 0x3}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x1248, 0x880}], 0x2, 0x0) 19:04:53 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9effffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:53 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019001400e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x60000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1492.711996] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1492.712004] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1492.712011] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1492.712032] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x9effffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x9]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xc00e0000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xf0ffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:54 executing program 3 (fault-call:11 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1493.196989] block nbd3: Could not allocate knbd recv work queue. [ 1493.208683] block nbd3: shutting down sockets [ 1493.278441] IPVS: Error connecting to the multicast addr [ 1493.395154] FAULT_INJECTION: forcing a failure. [ 1493.395154] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.428414] CPU: 0 PID: 2585 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1493.437053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.446420] Call Trace: [ 1493.449035] dump_stack+0x1fc/0x2fe [ 1493.452688] should_fail.cold+0xa/0x14 [ 1493.456595] ? setup_fault_attr+0x200/0x200 [ 1493.460947] __should_failslab+0x115/0x180 [ 1493.465202] should_failslab+0x5/0xf [ 1493.468935] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1493.473632] alloc_workqueue_attrs+0x60/0x100 [ 1493.478847] apply_wqattrs_prepare+0x10a/0x8b0 [ 1493.483734] apply_workqueue_attrs_locked+0xc5/0x120 [ 1493.488859] apply_workqueue_attrs+0x2c/0x50 [ 1493.493298] __alloc_workqueue_key+0x570/0xe20 [ 1493.498280] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1493.503972] ? __mutex_add_waiter+0x160/0x160 [ 1493.511540] ? HARDIRQ_verbose+0x10/0x10 [ 1493.516346] ? avc_has_extended_perms+0x6f3/0xe90 [ 1493.521488] nbd_start_device+0x185/0xd90 [ 1493.525674] ? security_capable+0x8e/0xc0 [ 1493.529864] nbd_ioctl+0x3d7/0xb80 [ 1493.533445] ? nbd_release+0x130/0x130 [ 1493.537356] ? avc_ss_reset+0x180/0x180 [ 1493.541360] ? lock_downgrade+0x740/0x740 [ 1493.545526] ? nbd_release+0x130/0x130 [ 1493.549440] blkdev_ioctl+0xbf7/0x1a0a [ 1493.553358] ? blkpg_ioctl+0x9d0/0x9d0 [ 1493.557355] ? perf_trace_lock+0xeb/0x4c0 [ 1493.561517] ? check_preemption_disabled+0x41/0x280 [ 1493.566562] ? perf_trace_lock_acquire+0x530/0x530 [ 1493.571527] block_ioctl+0xe9/0x130 [ 1493.575202] ? blkdev_fallocate+0x3f0/0x3f0 [ 1493.579548] do_vfs_ioctl+0xcda/0x12e0 [ 1493.583464] ? selinux_file_ioctl+0x46c/0x5d0 [ 1493.587987] ? selinux_file_ioctl+0x125/0x5d0 [ 1493.592511] ? check_preemption_disabled+0x41/0x280 [ 1493.597579] ? ioctl_preallocate+0x200/0x200 [ 1493.602625] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1493.608379] ? __fget+0x345/0x520 [ 1493.611981] ? ksys_dup3+0x3c0/0x3c0 [ 1493.615903] ? security_file_ioctl+0x6c/0xb0 [ 1493.620334] ksys_ioctl+0x9b/0xc0 [ 1493.624011] __x64_sys_ioctl+0x6f/0xb0 [ 1493.627922] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1493.632529] do_syscall_64+0xf9/0x620 [ 1493.636359] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1493.641571] RIP: 0033:0x45ca29 [ 1493.644869] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1493.664054] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1493.671779] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1493.679065] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1493.686352] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 19:04:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xfffff000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xffffff7f, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:54 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x17]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1493.693639] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1493.700931] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1493.748076] block nbd3: Could not allocate knbd recv work queue. [ 1493.757536] block nbd3: shutting down sockets 19:04:55 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xa7ffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xffffff9e, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:55 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019002000e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:55 executing program 3 (fault-call:11 fault-nth:4): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1494.361079] FAULT_INJECTION: forcing a failure. [ 1494.361079] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.417057] CPU: 0 PID: 2617 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1494.424907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.434278] Call Trace: [ 1494.436935] dump_stack+0x1fc/0x2fe [ 1494.440593] should_fail.cold+0xa/0x14 [ 1494.444488] ? setup_fault_attr+0x200/0x200 [ 1494.444515] __should_failslab+0x115/0x180 [ 1494.444532] should_failslab+0x5/0xf [ 1494.444552] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1494.444579] alloc_workqueue_attrs+0x60/0x100 [ 1494.444596] apply_wqattrs_prepare+0x117/0x8b0 [ 1494.444628] apply_workqueue_attrs_locked+0xc5/0x120 [ 1494.444647] apply_workqueue_attrs+0x2c/0x50 [ 1494.444665] __alloc_workqueue_key+0x570/0xe20 [ 1494.444692] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1494.444712] ? __mutex_add_waiter+0x160/0x160 [ 1494.444726] ? HARDIRQ_verbose+0x10/0x10 [ 1494.444746] ? avc_has_extended_perms+0x6f3/0xe90 [ 1494.444769] nbd_start_device+0x185/0xd90 [ 1494.444788] ? security_capable+0x8e/0xc0 [ 1494.444812] nbd_ioctl+0x3d7/0xb80 [ 1494.444834] ? nbd_release+0x130/0x130 [ 1494.444849] ? avc_ss_reset+0x180/0x180 [ 1494.444872] ? lock_downgrade+0x740/0x740 [ 1494.444888] ? nbd_release+0x130/0x130 [ 1494.444908] blkdev_ioctl+0xbf7/0x1a0a [ 1494.444932] ? blkpg_ioctl+0x9d0/0x9d0 [ 1494.470957] ? perf_trace_lock+0xeb/0x4c0 [ 1494.470980] ? check_preemption_disabled+0x41/0x280 [ 1494.548278] ? perf_trace_lock_acquire+0x530/0x530 [ 1494.553245] block_ioctl+0xe9/0x130 [ 1494.556886] ? blkdev_fallocate+0x3f0/0x3f0 [ 1494.561226] do_vfs_ioctl+0xcda/0x12e0 [ 1494.565132] ? selinux_file_ioctl+0x46c/0x5d0 [ 1494.569642] ? selinux_file_ioctl+0x125/0x5d0 [ 1494.574152] ? check_preemption_disabled+0x41/0x280 [ 1494.579186] ? ioctl_preallocate+0x200/0x200 [ 1494.583623] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1494.588928] ? __fget+0x345/0x520 [ 1494.592406] ? ksys_dup3+0x3c0/0x3c0 [ 1494.596149] ? security_file_ioctl+0x6c/0xb0 [ 1494.600573] ksys_ioctl+0x9b/0xc0 [ 1494.604048] __x64_sys_ioctl+0x6f/0xb0 [ 1494.607944] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1494.612546] do_syscall_64+0xf9/0x620 [ 1494.616387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1494.621588] RIP: 0033:0x45ca29 [ 1494.624787] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1494.643707] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.651441] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1494.658732] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 19:04:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xfffffff0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1494.666021] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1494.673315] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1494.680607] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1494.726397] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 19:04:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0xffffffff, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1494.971418] block nbd3: Could not allocate knbd recv work queue. [ 1494.982207] block nbd3: shutting down sockets [ 1494.989377] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1495.005248] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 19:04:56 executing program 3 (fault-call:11 fault-nth:5): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1495.029210] ext4_test_bit(bit=127, block=4) = 0 [ 1495.040003] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1495.142536] FAULT_INJECTION: forcing a failure. [ 1495.142536] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.185746] CPU: 0 PID: 2639 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1495.193609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.202999] Call Trace: [ 1495.205627] dump_stack+0x1fc/0x2fe [ 1495.209299] should_fail.cold+0xa/0x14 [ 1495.213234] ? setup_fault_attr+0x200/0x200 [ 1495.217604] __should_failslab+0x115/0x180 [ 1495.221880] should_failslab+0x5/0xf [ 1495.225633] kmem_cache_alloc_node+0x23f/0x3b0 [ 1495.230251] alloc_unbound_pwq+0x4a2/0xc30 [ 1495.234533] apply_wqattrs_prepare+0x30c/0x8b0 [ 1495.239155] apply_workqueue_attrs_locked+0xc5/0x120 [ 1495.244287] apply_workqueue_attrs+0x2c/0x50 [ 1495.248722] __alloc_workqueue_key+0x570/0xe20 [ 1495.253382] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1495.258432] ? __mutex_add_waiter+0x160/0x160 [ 1495.262960] ? HARDIRQ_verbose+0x10/0x10 [ 1495.267065] ? avc_has_extended_perms+0x6f3/0xe90 [ 1495.271955] nbd_start_device+0x185/0xd90 [ 1495.276124] ? security_capable+0x8e/0xc0 [ 1495.280312] nbd_ioctl+0x3d7/0xb80 19:04:56 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019002d00e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1495.284198] ? nbd_release+0x130/0x130 [ 1495.288107] ? avc_ss_reset+0x180/0x180 [ 1495.292118] ? lock_downgrade+0x740/0x740 [ 1495.296285] ? nbd_release+0x130/0x130 [ 1495.300201] blkdev_ioctl+0xbf7/0x1a0a [ 1495.304137] ? blkpg_ioctl+0x9d0/0x9d0 [ 1495.308151] ? perf_trace_lock+0xeb/0x4c0 [ 1495.312328] ? check_preemption_disabled+0x41/0x280 [ 1495.317369] ? perf_trace_lock_acquire+0x530/0x530 [ 1495.322334] block_ioctl+0xe9/0x130 [ 1495.326005] ? blkdev_fallocate+0x3f0/0x3f0 [ 1495.330347] do_vfs_ioctl+0xcda/0x12e0 [ 1495.334259] ? selinux_file_ioctl+0x46c/0x5d0 [ 1495.338784] ? selinux_file_ioctl+0x125/0x5d0 [ 1495.343305] ? check_preemption_disabled+0x41/0x280 [ 1495.348352] ? ioctl_preallocate+0x200/0x200 [ 1495.352886] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1495.358221] ? __fget+0x345/0x520 [ 1495.361698] ? ksys_dup3+0x3c0/0x3c0 [ 1495.365444] ? security_file_ioctl+0x6c/0xb0 [ 1495.369874] ksys_ioctl+0x9b/0xc0 [ 1495.373367] __x64_sys_ioctl+0x6f/0xb0 [ 1495.377291] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1495.381900] do_syscall_64+0xf9/0x620 [ 1495.385728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1495.390935] RIP: 0033:0x45ca29 [ 1495.394139] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1495.413063] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.420792] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1495.428077] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1495.435360] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1495.442642] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1495.449930] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1495.552626] block nbd3: Could not allocate knbd recv work queue. [ 1495.561740] block nbd3: shutting down sockets [ 1495.607560] IPVS: Error connecting to the multicast addr 19:04:56 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xf0ffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x2, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x9]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:56 executing program 3 (fault-call:11 fault-nth:6): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 1495.773149] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1495.800436] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1495.819468] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1495.856874] FAULT_INJECTION: forcing a failure. [ 1495.856874] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.868808] ext4_test_bit(bit=127, block=4) = 0 19:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x3, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1495.897906] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1495.917117] CPU: 1 PID: 2667 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1495.924964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.934337] Call Trace: [ 1495.936971] dump_stack+0x1fc/0x2fe [ 1495.940628] should_fail.cold+0xa/0x14 [ 1495.944539] ? setup_fault_attr+0x200/0x200 [ 1495.948895] __should_failslab+0x115/0x180 [ 1495.953154] should_failslab+0x5/0xf [ 1495.956886] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1495.962012] alloc_worker+0x43/0x1c0 [ 1495.965752] init_rescuer.part.0+0x1a/0x190 [ 1495.970098] __alloc_workqueue_key+0x5f7/0xe20 [ 1495.974714] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1495.979762] ? __mutex_add_waiter+0x160/0x160 [ 1495.984285] ? HARDIRQ_verbose+0x10/0x10 [ 1495.988375] ? avc_has_extended_perms+0x6f3/0xe90 [ 1495.993252] nbd_start_device+0x185/0xd90 [ 1495.997421] ? security_capable+0x8e/0xc0 [ 1496.001591] nbd_ioctl+0x3d7/0xb80 [ 1496.005164] ? nbd_release+0x130/0x130 [ 1496.009078] ? avc_ss_reset+0x180/0x180 [ 1496.013086] ? lock_downgrade+0x740/0x740 [ 1496.017250] ? nbd_release+0x130/0x130 [ 1496.021155] blkdev_ioctl+0xbf7/0x1a0a [ 1496.025069] ? blkpg_ioctl+0x9d0/0x9d0 [ 1496.028975] ? perf_trace_lock+0xeb/0x4c0 [ 1496.033139] ? check_preemption_disabled+0x41/0x280 [ 1496.038182] ? perf_trace_lock_acquire+0x530/0x530 [ 1496.043143] block_ioctl+0xe9/0x130 [ 1496.046788] ? blkdev_fallocate+0x3f0/0x3f0 [ 1496.051132] do_vfs_ioctl+0xcda/0x12e0 [ 1496.055047] ? selinux_file_ioctl+0x46c/0x5d0 [ 1496.059561] ? selinux_file_ioctl+0x125/0x5d0 [ 1496.064073] ? check_preemption_disabled+0x41/0x280 [ 1496.069120] ? ioctl_preallocate+0x200/0x200 [ 1496.073556] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1496.078861] ? __fget+0x345/0x520 [ 1496.082339] ? ksys_dup3+0x3c0/0x3c0 [ 1496.086084] ? security_file_ioctl+0x6c/0xb0 [ 1496.090544] ksys_ioctl+0x9b/0xc0 [ 1496.094144] __x64_sys_ioctl+0x6f/0xb0 [ 1496.098061] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1496.102696] do_syscall_64+0xf9/0x620 [ 1496.106531] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1496.111735] RIP: 0033:0x45ca29 [ 1496.114935] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1496.133852] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x4, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1496.144436] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1496.144446] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1496.144464] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1496.166296] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1496.166306] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:57 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019043700e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xa, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x17]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1496.367825] block nbd3: Could not allocate knbd recv work queue. [ 1496.399948] block nbd3: shutting down sockets 19:04:57 executing program 3 (fault-call:11 fault-nth:7): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xe, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1496.574294] IPVS: Error connecting to the multicast addr 19:04:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xf, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1496.656788] FAULT_INJECTION: forcing a failure. [ 1496.656788] name failslab, interval 1, probability 0, space 0, times 0 [ 1496.734082] CPU: 0 PID: 2694 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1496.741935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1496.751306] Call Trace: [ 1496.753922] dump_stack+0x1fc/0x2fe [ 1496.757573] should_fail.cold+0xa/0x14 [ 1496.761488] ? setup_fault_attr+0x200/0x200 [ 1496.765838] __should_failslab+0x115/0x180 [ 1496.770098] should_failslab+0x5/0xf [ 1496.773835] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1496.778624] ? cancel_delayed_work_sync+0x20/0x20 [ 1496.783488] __kthread_create_on_node+0xd2/0x410 [ 1496.788264] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1496.793653] ? perf_trace_lock+0xeb/0x4c0 [ 1496.797828] ? kthread_parkme+0xa0/0xa0 [ 1496.801853] ? HARDIRQ_verbose+0x10/0x10 [ 1496.805932] ? should_fail+0x142/0x7c0 [ 1496.809848] ? cancel_delayed_work_sync+0x20/0x20 [ 1496.814714] kthread_create_on_node+0xbb/0xf0 [ 1496.819236] ? __kthread_create_on_node+0x410/0x410 [ 1496.824281] ? alloc_worker+0x43/0x1c0 [ 1496.828224] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1496.833268] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 1496.838669] init_rescuer.part.0+0x76/0x190 [ 1496.843027] __alloc_workqueue_key+0x5f7/0xe20 [ 1496.847642] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1496.852688] ? __mutex_add_waiter+0x160/0x160 [ 1496.857209] ? HARDIRQ_verbose+0x10/0x10 [ 1496.861296] ? avc_has_extended_perms+0x6f3/0xe90 [ 1496.866161] nbd_start_device+0x185/0xd90 [ 1496.870332] ? security_capable+0x8e/0xc0 [ 1496.874542] nbd_ioctl+0x3d7/0xb80 [ 1496.878110] ? nbd_release+0x130/0x130 [ 1496.882020] ? avc_ss_reset+0x180/0x180 [ 1496.886031] ? lock_downgrade+0x740/0x740 [ 1496.890198] ? nbd_release+0x130/0x130 [ 1496.894107] blkdev_ioctl+0xbf7/0x1a0a [ 1496.898017] ? blkpg_ioctl+0x9d0/0x9d0 [ 1496.901928] ? perf_trace_lock+0xeb/0x4c0 [ 1496.906108] ? check_preemption_disabled+0x41/0x280 [ 1496.911400] ? perf_trace_lock_acquire+0x530/0x530 [ 1496.916373] block_ioctl+0xe9/0x130 [ 1496.920028] ? blkdev_fallocate+0x3f0/0x3f0 [ 1496.924413] do_vfs_ioctl+0xcda/0x12e0 [ 1496.928328] ? selinux_file_ioctl+0x46c/0x5d0 [ 1496.932846] ? selinux_file_ioctl+0x125/0x5d0 [ 1496.937364] ? check_preemption_disabled+0x41/0x280 [ 1496.942405] ? ioctl_preallocate+0x200/0x200 [ 1496.946850] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1496.952333] ? __fget+0x345/0x520 [ 1496.955816] ? ksys_dup3+0x3c0/0x3c0 [ 1496.959561] ? security_file_ioctl+0x6c/0xb0 [ 1496.963997] ksys_ioctl+0x9b/0xc0 [ 1496.967473] __x64_sys_ioctl+0x6f/0xb0 [ 1496.971386] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1496.975996] do_syscall_64+0xf9/0x620 [ 1496.980292] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1496.985652] RIP: 0033:0x45ca29 [ 1496.988878] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1497.008003] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.015731] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1497.023022] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1497.030312] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1497.037600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1497.045006] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1497.055356] block nbd3: Could not allocate knbd recv work queue. [ 1497.064392] block nbd3: shutting down sockets [ 1497.072917] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1497.167300] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1497.177238] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1497.228616] ext4_test_bit(bit=127, block=4) = 0 [ 1497.254752] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:58 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfc000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:04:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:04:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x60, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:58 executing program 3 (fault-call:11 fault-nth:8): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:58 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e008ccb6a00000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001480)='/dev/dlm-monitor\x00', 0x260000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x28}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x48, r2, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800c}, 0x200408c4) r3 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924a17, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x240, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x128, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x827643e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x554f1886}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe29a3f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b6d198a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40730958}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2992ea37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c664144}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x208056b3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x357b28e2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dd66771}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bcd1333}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x251d5c8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x679d6f97}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d4c99d6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a710cb0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ecb8141}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb0afadb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28355b34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x794be8a9}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29a2f97c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11079227}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72359359}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6357de98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2db40004}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45c7d5f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73def0bd}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x801}, 0x24004080) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x504, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x316c4a03}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdac0a69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35584b75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62b19885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1742e957}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57668193}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19b9876b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ddee648}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70abd7d8}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f97f87d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c676ea4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x371d05b7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x1dc, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaa1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4762}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x818b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x557d4f95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x167d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5be4e1da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x159e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd8e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f9dd065}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d51188b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2db904a6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e5b6b9c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc592}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bb0aae6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a4395e9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x93d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x999e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1104}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f6a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60cdc47d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78f65d6c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa849}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4528d3b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7188e2c9}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d4365d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac0c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26f89ad3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa27b}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26b1bf22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x61c8ff31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5140a59c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28bdb42e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe0803ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72532ced}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc56b}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c4c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x608c9345}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x207ad483}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72c1d5a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x269a1df7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf681}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73066969}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7acbaf5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4402611a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbbe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59e58588}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5330}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x19c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeed6280}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2217c772}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ef14e6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x615ee02c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71da4782}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d850e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52678cf8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x182bb444}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c3c16d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5446923e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d393338}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x223b9456}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60a04bd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f7de237}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74a88cb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fb283c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x66}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2371567b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bc9d80d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb59ae3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b4ebaa6}]}]}]}, 0x504}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) fcntl$dupfd(r6, 0x0, r4) write$P9_RREADDIR(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2a000000290100ff0700000204000000040000000000000000040000000000000707002e2f66696c65305a9c6e74e685e61cc40beb0ecbdc1df69c57341d428eb207099b022908c7129e6bb9cb8b05a6"], 0x2a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$dupfd(r9, 0x0, r7) fadvise64(r7, 0xffffffffffffffc0, 0x9, 0x5) 19:04:58 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019003f00e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:04:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xf0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1497.611917] FAULT_INJECTION: forcing a failure. [ 1497.611917] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.658534] CPU: 0 PID: 2721 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1497.666380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1497.675759] Call Trace: [ 1497.678378] dump_stack+0x1fc/0x2fe [ 1497.682029] should_fail.cold+0xa/0x14 [ 1497.685932] ? setup_fault_attr+0x200/0x200 [ 1497.690264] ? synchronize_rcu_expedited+0xa0/0xa0 [ 1497.695218] __should_failslab+0x115/0x180 [ 1497.699462] should_failslab+0x5/0xf [ 1497.703186] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1497.707872] blk_mq_update_nr_hw_queues+0x2b5/0xad0 [ 1497.712906] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1497.718023] ? blk_mq_init_queue+0xa0/0xa0 [ 1497.722289] ? avc_has_extended_perms+0x6f3/0xe90 [ 1497.727159] nbd_start_device+0x1f4/0xd90 [ 1497.731334] nbd_ioctl+0x3d7/0xb80 [ 1497.734895] ? nbd_release+0x130/0x130 [ 1497.738800] ? avc_ss_reset+0x180/0x180 [ 1497.742793] ? lock_downgrade+0x740/0x740 [ 1497.746952] ? nbd_release+0x130/0x130 [ 1497.750853] blkdev_ioctl+0xbf7/0x1a0a [ 1497.754756] ? blkpg_ioctl+0x9d0/0x9d0 [ 1497.758672] ? perf_trace_lock+0xeb/0x4c0 [ 1497.762834] ? check_preemption_disabled+0x41/0x280 [ 1497.767870] ? perf_trace_lock_acquire+0x530/0x530 [ 1497.772823] block_ioctl+0xe9/0x130 [ 1497.776457] ? blkdev_fallocate+0x3f0/0x3f0 [ 1497.780800] do_vfs_ioctl+0xcda/0x12e0 [ 1497.784701] ? selinux_file_ioctl+0x46c/0x5d0 [ 1497.789207] ? selinux_file_ioctl+0x125/0x5d0 [ 1497.793713] ? check_preemption_disabled+0x41/0x280 [ 1497.798758] ? ioctl_preallocate+0x200/0x200 [ 1497.803177] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1497.808465] ? __fget+0x345/0x520 [ 1497.811931] ? ksys_dup3+0x3c0/0x3c0 [ 1497.815662] ? security_file_ioctl+0x6c/0xb0 [ 1497.820093] ksys_ioctl+0x9b/0xc0 [ 1497.823582] __x64_sys_ioctl+0x6f/0xb0 [ 1497.827485] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1497.832172] do_syscall_64+0xf9/0x620 [ 1497.836014] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1497.841217] RIP: 0033:0x45ca29 19:04:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x2]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1497.844420] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1497.863336] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1497.871068] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1497.878353] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1497.885669] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1497.892945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1497.900228] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:59 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000706010867a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000000c0)=""/177, &(0x7f00000001c0)=0xb1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) fcntl$dupfd(r7, 0x0, r1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) 19:04:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x300, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1497.980551] block nbd3: Receive control failed (result -107) [ 1497.986739] block nbd3: Receive control failed (result -107) [ 1497.995173] block nbd3: shutting down sockets 19:04:59 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfe800000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 1498.037607] IPVS: Error connecting to the multicast addr 19:04:59 executing program 3 (fault-call:11 fault-nth:9): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:04:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1498.130237] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1498.160381] IPVS: length: 177 != 8 [ 1498.207665] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1498.216468] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1498.241415] ext4_test_bit(bit=127, block=6) = 0 [ 1498.254478] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 19:04:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xe00, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1498.321956] FAULT_INJECTION: forcing a failure. [ 1498.321956] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.378203] CPU: 1 PID: 2754 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1498.386057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1498.395452] Call Trace: [ 1498.398149] dump_stack+0x1fc/0x2fe [ 1498.401800] should_fail.cold+0xa/0x14 [ 1498.405707] ? setup_fault_attr+0x200/0x200 [ 1498.410050] ? synchronize_rcu_expedited+0xa0/0xa0 [ 1498.415000] __should_failslab+0x115/0x180 [ 1498.419244] should_failslab+0x5/0xf [ 1498.422968] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 1498.427655] blk_mq_update_nr_hw_queues+0x2b5/0xad0 [ 1498.432685] ? workqueue_sysfs_register+0x3e0/0x3e0 [ 1498.437752] ? blk_mq_init_queue+0xa0/0xa0 [ 1498.441997] ? avc_has_extended_perms+0x6f3/0xe90 [ 1498.446856] nbd_start_device+0x1f4/0xd90 [ 1498.451030] nbd_ioctl+0x3d7/0xb80 [ 1498.454586] ? nbd_release+0x130/0x130 [ 1498.458479] ? avc_ss_reset+0x180/0x180 [ 1498.462492] ? lock_downgrade+0x740/0x740 [ 1498.466662] ? nbd_release+0x130/0x130 [ 1498.470567] blkdev_ioctl+0xbf7/0x1a0a [ 1498.474484] ? blkpg_ioctl+0x9d0/0x9d0 [ 1498.478389] ? perf_trace_lock+0xeb/0x4c0 [ 1498.482560] ? check_preemption_disabled+0x41/0x280 [ 1498.487602] ? perf_trace_lock_acquire+0x530/0x530 [ 1498.492573] block_ioctl+0xe9/0x130 [ 1498.496212] ? blkdev_fallocate+0x3f0/0x3f0 [ 1498.500550] do_vfs_ioctl+0xcda/0x12e0 [ 1498.504461] ? selinux_file_ioctl+0x46c/0x5d0 [ 1498.508979] ? selinux_file_ioctl+0x125/0x5d0 [ 1498.513602] ? check_preemption_disabled+0x41/0x280 [ 1498.518650] ? ioctl_preallocate+0x200/0x200 [ 1498.523090] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1498.528400] ? __fget+0x345/0x520 [ 1498.531881] ? ksys_dup3+0x3c0/0x3c0 [ 1498.535637] ? security_file_ioctl+0x6c/0xb0 [ 1498.540063] ksys_ioctl+0x9b/0xc0 [ 1498.543533] __x64_sys_ioctl+0x6f/0xb0 [ 1498.547431] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1498.552038] do_syscall_64+0xf9/0x620 [ 1498.555858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1498.561059] RIP: 0033:0x45ca29 19:04:59 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019006400e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 1498.564260] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1498.583172] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1498.590913] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1498.598218] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1498.605500] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1498.612780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1498.620059] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 19:04:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x4]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1498.738839] block nbd3: Receive control failed (result -107) [ 1498.750588] block nbd3: Receive control failed (result -107) [ 1498.763657] block nbd3: shutting down sockets 19:04:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xec0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:04:59 executing program 3 (fault-call:11 fault-nth:10): r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000000de7) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$NBD_SET_SOCK(r2, 0xab00, r5) r6 = fcntl$dupfd(r5, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 19:05:00 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000007060108b9a4f1831e223b990000000305000100060000000800064000c5744b"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924a17, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = fcntl$dupfd(r7, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKROSET(r8, 0x125d, &(0x7f0000000080)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$dupfd(r11, 0x0, r9) sendmsg$AUDIT_SIGNAL_INFO(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x0, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x840) accept4$alg(r4, 0x0, 0x0, 0x80000) 19:05:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x9]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) 19:05:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0xf00, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1498.943065] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1498.994104] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1499.001307] EXT4-fs error (device loop4): ext4_orphan_get:1257: comm syz-executor.4: bad orphan inode 128 [ 1499.013748] ext4_test_bit(bit=127, block=4) = 0 [ 1499.022732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1499.084783] FAULT_INJECTION: forcing a failure. [ 1499.084783] name failslab, interval 1, probability 0, space 0, times 0 [ 1499.121199] CPU: 0 PID: 2777 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1499.129084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.138458] Call Trace: [ 1499.141192] dump_stack+0x1fc/0x2fe [ 1499.144856] should_fail.cold+0xa/0x14 [ 1499.148807] ? setup_fault_attr+0x200/0x200 [ 1499.153171] __should_failslab+0x115/0x180 [ 1499.157435] should_failslab+0x5/0xf [ 1499.161171] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1499.166325] __kmalloc_node+0x38/0x70 [ 1499.170156] blk_mq_realloc_hw_ctxs+0x5a3/0x1060 [ 1499.174959] blk_mq_update_nr_hw_queues+0x500/0xad0 [ 1499.180014] ? blk_mq_init_queue+0xa0/0xa0 19:05:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x1b4e, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1499.184287] ? avc_has_extended_perms+0x6f3/0xe90 [ 1499.189167] nbd_start_device+0x1f4/0xd90 [ 1499.193366] nbd_ioctl+0x3d7/0xb80 [ 1499.196944] ? nbd_release+0x130/0x130 [ 1499.200862] ? avc_ss_reset+0x180/0x180 [ 1499.204877] ? lock_downgrade+0x740/0x740 [ 1499.209056] ? nbd_release+0x130/0x130 [ 1499.212978] blkdev_ioctl+0xbf7/0x1a0a [ 1499.216895] ? blkpg_ioctl+0x9d0/0x9d0 [ 1499.220807] ? perf_trace_lock+0xeb/0x4c0 [ 1499.224978] ? check_preemption_disabled+0x41/0x280 [ 1499.230030] ? perf_trace_lock_acquire+0x530/0x530 [ 1499.235001] block_ioctl+0xe9/0x130 [ 1499.238639] ? blkdev_fallocate+0x3f0/0x3f0 [ 1499.243011] do_vfs_ioctl+0xcda/0x12e0 [ 1499.246917] ? selinux_file_ioctl+0x46c/0x5d0 [ 1499.251425] ? selinux_file_ioctl+0x125/0x5d0 [ 1499.255939] ? check_preemption_disabled+0x41/0x280 [ 1499.261093] ? ioctl_preallocate+0x200/0x200 [ 1499.265539] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1499.270840] ? __fget+0x345/0x520 [ 1499.274320] ? ksys_dup3+0x3c0/0x3c0 [ 1499.278060] ? security_file_ioctl+0x6c/0xb0 [ 1499.282516] ksys_ioctl+0x9b/0xc0 [ 1499.285993] __x64_sys_ioctl+0x6f/0xb0 [ 1499.289908] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1499.294643] do_syscall_64+0xf9/0x620 [ 1499.298480] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1499.303692] RIP: 0033:0x45ca29 [ 1499.306904] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1499.325823] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.333555] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1499.340843] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1499.348129] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1499.355423] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1499.362709] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1499.372213] IPVS: Error connecting to the multicast addr [ 1499.471571] BUG: unable to handle kernel NULL pointer dereference at 0000000000000118 [ 1499.479600] PGD 49789067 P4D 49789067 PUD 3886b067 PMD 0 [ 1499.485172] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1499.489681] CPU: 0 PID: 2777 Comm: syz-executor.3 Not tainted 4.19.124-syzkaller #0 [ 1499.497489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.506901] RIP: 0010:blk_mq_map_swqueue+0x295/0xa30 19:05:00 executing program 1: getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video0\x00', 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xfec00000}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2074}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf3c8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008849}, 0x48000) writev(r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="1cdf66d8e6c6", 0x6}, {0x0}, {&(0x7f00000000c0)="5e3bc350e6042044eeb0f3b965d174602ccd6c05de31043fe6ae449db66dea44595143a1bad24ba8c5d4947b3b6952109a165f563f4aef5ce5449d911dabef2c1c2f6579f31003ec44118767fcb0402655f92031fb125b8e2fe2393eb47461f0607f0a9152ba321c836d6729b01bf42415dab906eb1504ad01a1214e94e6a70bc375ca108dc80a235da78edce59d8a2dc2c8bb3ba38cb3a3b29281041d39e14d8242b254d90ba5220f19620ad86e314650cb661d898f8b287645c906b68f7cf10573b735c0532556f3be351044da6945ff62be3a81708e71ef"}], 0x56) close(r1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 19:05:00 executing program 4: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000280)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x273, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000004c0), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="80000000380400001903d000e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 19:05:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x3f00, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 19:05:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x17]}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_x_sa2={0x2, 0x13, 0x6}]}, 0x70}}, 0x0) [ 1499.512039] Code: 03 80 3c 28 00 0f 85 dc 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 3f e8 7a 76 22 fe 41 83 fc 3f 0f 87 13 05 00 00 e8 fb 74 22 fe 4d 0f ab b7 18 01 00 00 49 8d bf 74 01 00 00 48 89 fa 48 c1 ea [ 1499.528016] PM: Basic memory bitmaps freed [ 1499.531076] RSP: 0018:ffff8880a47df908 EFLAGS: 00010246 [ 1499.531087] RAX: 0000000000040000 RBX: ffff8880a3a3f040 RCX: ffffc9000c0ef000 [ 1499.531094] RDX: 0000000000040000 RSI: ffffffff834513f5 RDI: 0000000000000005 [ 1499.531101] RBP: dffffc0000000000 R08: ffff888035664200 R09: 0000000000000000 [ 1499.531114] R10: ffffed100254fff0 R11: ffff888012a7ff83 R12: 0000000000000001 [ 1499.569806] R13: ffffe8ffffd36b40 R14: 0000000000000001 R15: 0000000000000000 [ 1499.577105] FS: 00007f73d87da700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1499.585347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.591247] CR2: 0000000000000118 CR3: 0000000088ef3000 CR4: 00000000001426f0 [ 1499.598543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1499.605832] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1499.613115] Call Trace: [ 1499.615726] blk_mq_update_nr_hw_queues+0x565/0xad0 [ 1499.620784] ? blk_mq_init_queue+0xa0/0xa0 [ 1499.625041] ? avc_has_extended_perms+0x6f3/0xe90 [ 1499.629916] nbd_start_device+0x1f4/0xd90 [ 1499.634093] nbd_ioctl+0x3d7/0xb80 [ 1499.637660] ? nbd_release+0x130/0x130 [ 1499.641577] ? avc_ss_reset+0x180/0x180 [ 1499.645584] ? lock_downgrade+0x740/0x740 [ 1499.649755] ? nbd_release+0x130/0x130 [ 1499.653672] blkdev_ioctl+0xbf7/0x1a0a [ 1499.657585] ? blkpg_ioctl+0x9d0/0x9d0 [ 1499.661495] ? perf_trace_lock+0xeb/0x4c0 [ 1499.665672] ? check_preemption_disabled+0x41/0x280 [ 1499.670725] ? perf_trace_lock_acquire+0x530/0x530 [ 1499.675682] block_ioctl+0xe9/0x130 [ 1499.679326] ? blkdev_fallocate+0x3f0/0x3f0 [ 1499.683672] do_vfs_ioctl+0xcda/0x12e0 [ 1499.687698] ? selinux_file_ioctl+0x46c/0x5d0 [ 1499.692218] ? selinux_file_ioctl+0x125/0x5d0 [ 1499.696734] ? check_preemption_disabled+0x41/0x280 [ 1499.700294] PM: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1499.701794] ? ioctl_preallocate+0x200/0x200 [ 1499.701813] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 1499.701826] ? __fget+0x345/0x520 19:05:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x4e1b, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1499.701843] ? ksys_dup3+0x3c0/0x3c0 [ 1499.701862] ? security_file_ioctl+0x6c/0xb0 [ 1499.701876] ksys_ioctl+0x9b/0xc0 [ 1499.701892] __x64_sys_ioctl+0x6f/0xb0 [ 1499.701906] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1499.701924] do_syscall_64+0xf9/0x620 [ 1499.701943] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1499.701954] RIP: 0033:0x45ca29 19:05:00 executing program 2: sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000070601088d74964654a9aa67a400060000000800000000000000000000005049"], 0x24}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0xc, @remote, 0x4e24, 0x3, 'fo\x00', 0x24, 0x6, 0x21}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fcntl$dupfd(r3, 0x0, r1) sendmmsg$alg(r3, &(0x7f0000000140), 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000100)={0x80, 0x4, 0x5, 0xffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000004c0)={0x24, r5, 0xc8ef0a4335e6829f, 0x0, 0x0, {0xf}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0x9}]}]}, 0x24}}, 0x0) [ 1499.701969] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1499.701976] RSP: 002b:00007f73d87d9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.701990] RAX: ffffffffffffffda RBX: 00000000004e9080 RCX: 000000000045ca29 [ 1499.701998] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 1499.702005] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1499.702011] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1499.702020] R13: 0000000000000409 R14: 00000000004c6c64 R15: 00007f73d87da6d4 [ 1499.702044] Modules linked in: 19:05:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x6000, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) [ 1499.713519] PM: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1499.717956] CR2: 0000000000000118 [ 1499.741759] ---[ end trace 6b3da233838d60d0 ]--- [ 1499.829490] PM: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1499.857543] RIP: 0010:blk_mq_map_swqueue+0x295/0xa30 [ 1499.862897] Code: 03 80 3c 28 00 0f 85 dc 06 00 00 44 89 e6 bf 3f 00 00 00 4d 8b 3f e8 7a 76 22 fe 41 83 fc 3f 0f 87 13 05 00 00 e8 fb 74 22 fe 4d 0f ab b7 18 01 00 00 49 8d bf 74 01 00 00 48 89 fa 48 c1 ea [ 1499.882079] RSP: 0018:ffff8880a47df908 EFLAGS: 00010246 [ 1499.887730] RAX: 0000000000040000 RBX: ffff8880a3a3f040 RCX: ffffc9000c0ef000 [ 1499.895704] RDX: 0000000000040000 RSI: ffffffff834513f5 RDI: 0000000000000005 [ 1499.903673] RBP: dffffc0000000000 R08: ffff888035664200 R09: 0000000000000000 [ 1499.917147] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1499.928492] R10: ffffed100254fff0 R11: ffff888012a7ff83 R12: 0000000000000001 [ 1499.941513] R13: ffffe8ffffd36b40 R14: 0000000000000001 R15: 0000000000000000 [ 1499.959985] FS: 00007f73d87da700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1499.973102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.998145] CR2: 0000001b31622000 CR3: 0000000088ef3000 CR4: 00000000001426f0 [ 1500.016496] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1500.024427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1500.036994] Kernel panic - not syncing: Fatal exception [ 1500.043700] Kernel Offset: disabled [ 1500.047372] Rebooting in 86400 seconds..