828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) pipe(&(0x7f00000003c0)) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r5, 0x0, 0xffefffff) 12:48:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1117.375933][T17515] loop1: detected capacity change from 0 to 512 [ 1117.406931][T17515] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1117.417292][T17515] EXT4-fs (loop1): group descriptors corrupted! 12:48:13 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1000, 0x51f, 0xead2, 0x4, 0x81}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) close(0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000380)=0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1000, 0x51f, 0xead2, 0x4, 0x81}, &(0x7f0000000200)=0x14) (async) [ 1117.639608][T17532] loop1: detected capacity change from 0 to 512 [ 1117.704981][T17532] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1117.716907][T17532] EXT4-fs (loop1): group descriptors corrupted! 12:48:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1000, 0x51f, 0xead2, 0x4, 0x81}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) close(0xffffffffffffffff) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r3, 0x1}, &(0x7f0000000180)=0xc) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e24, @loopback}}}, &(0x7f0000000380)=0x84) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x1000, 0x51f, 0xead2, 0x4, 0x81}, &(0x7f0000000200)=0x14) (async) 12:48:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1117.846975][T17556] loop1: detected capacity change from 0 to 512 12:48:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010acfc1e330d451b4e2559c9c2b00"/34, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10000, 0x20}, 0xc) r3 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000280)=0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:13 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1117.911492][T17556] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1117.924632][T17556] EXT4-fs (loop1): group descriptors corrupted! 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1118.047024][T17572] loop1: detected capacity change from 0 to 512 [ 1118.105833][T17572] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1118.116121][T17572] EXT4-fs (loop1): group descriptors corrupted! 12:48:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 12:48:14 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r5, 0x0, 0xffefffff) 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1118.286044][T17578] loop1: detected capacity change from 0 to 512 [ 1118.315398][T17578] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1118.327243][T17578] EXT4-fs (loop1): group descriptors corrupted! 12:48:14 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1118.496421][T17587] loop1: detected capacity change from 0 to 512 [ 1118.547347][T17587] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1118.558701][T17587] EXT4-fs (loop1): group descriptors corrupted! 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1118.657437][T17596] loop1: detected capacity change from 0 to 512 [ 1118.694371][T17596] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! 12:48:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) [ 1118.704557][T17596] EXT4-fs (loop1): group descriptors corrupted! 12:48:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010acfc1e330d451b4e2559c9c2b00"/34, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10000, 0x20}, 0xc) r3 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000280)=0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) (async) r5 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (rerun: 64) sendmmsg$inet_sctp(r4, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:14 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010acfc1e330d451b4e2559c9c2b00"/34, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010acfc1e330d451b4e2559c9c2b00"/34, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10000, 0x20}, 0xc) r3 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000280)=0x8) r4 = socket(0xa, 0x1, 0x0) close(r4) (async) close(r4) memfd_secret(0x80000) (async) r5 = memfd_secret(0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1118.877207][T17606] loop1: detected capacity change from 0 to 512 [ 1118.911377][T17606] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! 12:48:15 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r5, 0x0, 0xffefffff) [ 1118.923401][T17606] EXT4-fs (loop1): group descriptors corrupted! 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQAobWRAiRagwejX+BejTxL/CkF6OeNF71bkyI4SJ6MGve7gyt3d2y27IsuJ9PMux7M2/mvTdvHvtm3k4DGFjV9E8WsSMifomI0YjYvTpBtfFx9cqF2b+uXJjNolZ75Y8s7RZ/Xrkwm5LVCim8vTjmeB6Rf5jFkRb5Lpw7f3Jmfn7ubBGfXDz19uTCufNPnTg1c3zu+Nzp6cOHDx2cevaZ6advSD1HUln3vndm356jr3/y0mwt3vj+y1T+HcX2sh7LxjacZzWq9XPUyqMbPvqtZWRFOBvqY0HoSiUiUnMN1/v/aFRiufFG48UP+lo4oKfSd/bmprWVMrBUA/7Hsuh3CYD+KL/o0/1vudzE4UffXT7SuAFK9b5aLI0tQ5Gnjy2Ne6ORHuVfjYjXlv7+NC3R8jkEAMCN9XUa/zzZavyXx90r0u0s5obGIuKOiNgVEXcWc0V3RdTT3hMR93aZf3VVvHn889PWdVWsQ2n891wxt/Xf8V9eJhmrFLGRev2HszdPzM8dKM7JeAxvTvGpNfL45oWfP263beX4Ly0p/3IsWJTj96FVD+iOzSzObKTOK11+P2LvUKv6Z9dmArKI2BMRe9dx/HTOTjz+xb4U3rm9efvu69Z/DTdgnqn2ecRjjfZfilX1L2WNnNrNT05uifm5A5PlVdHshx8vvdwu/+u3f2+l9t/W8vq/Vv+xbOV87UL3eVz69aO29zTrvf43Za/Ww5uKde/OLC6enYrYlC01r59e3reMl+lT/cf3t+7/uyL++azY776ISBfx/RHxQEQ8WJT9oYh4OCL2r1H/755/5K21z1B/2/9YV+3ffaBy8tuv2uXfWfsfqofGizWd/P/XaQE3cu4AAADgdpHXfwOf5RPXwnk+MdH4Df/u2JbPn1lYfKIa75w+1vit/FgM5+WTrtEVz0OnimfDZXx6Vfxg/blxrVarba3HJ2bPzPdqTh3ozPY2/T/5rdLv0gE919U8Wrs32oDbkvc1YXDp/zC49H8YXPo/DK5W/f9ixNU+FAW4yXz/w+DS/2Fw6f8wuPR/GEjNr8SXf25lPW/6Lwd2Hd3Q7gMUqPToyKkNe1n4yPt+6tYfyG+NYjQCmyOi08QXe9qmq68fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA29+/AQAA//9pkulk") [ 1119.023765][T17617] loop1: detected capacity change from 0 to 512 [ 1119.049238][T17617] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1119.059474][T17617] EXT4-fs (loop1): group descriptors corrupted! 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1119.156455][T17625] loop1: detected capacity change from 0 to 512 [ 1119.256948][T17625] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1119.267702][T17625] EXT4-fs (loop1): group descriptors corrupted! 12:48:15 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r5, 0x0, 0xffefffff) 12:48:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) 12:48:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1119.389571][T17630] loop1: detected capacity change from 0 to 512 [ 1119.431333][T17630] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1119.441623][T17630] EXT4-fs (loop1): group descriptors corrupted! 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1119.504518][T27614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:15 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1119.587729][T27614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.656347][T17640] loop1: detected capacity change from 0 to 512 [ 1119.670812][T27614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.709205][T17640] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1119.719452][T17640] EXT4-fs (loop1): group descriptors corrupted! [ 1119.737906][T27614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:15 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="011e2783aa080095dd85038dd74a7c44e5b1a6ff34762601dae4591b23ecc2477c4f8ce83a71847e59ce32acf982ac8a9e5d948a965796922e84d6ce577c6945c54bcdf777141d39", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x6, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x292040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x4, 0x800, 0x0, 0x9, 0x2d, 0x100000001, 0x200, 0x6c, 0x6, 0x7dd50fea, 0xfdb, 0x8fe8, 0x9a0c, 0x100000001]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x4, 0x20, 0xef3b, 0x800000000000001}, &(0x7f0000000000)=0x18) 12:48:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:16 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) [ 1120.398781][T27614] hsr_slave_0: left promiscuous mode [ 1120.410821][T27614] hsr_slave_1: left promiscuous mode [ 1120.436996][T27614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1120.449586][T27614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.504854][T27614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1120.512969][T27614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1120.555255][T27614] bridge_slave_1: left allmulticast mode [ 1120.562971][T27614] bridge_slave_1: left promiscuous mode [ 1120.570087][T27614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.603138][T27614] bridge_slave_0: left allmulticast mode [ 1120.611157][T27614] bridge_slave_0: left promiscuous mode [ 1120.617346][T27614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.660712][T27614] veth1_macvtap: left promiscuous mode [ 1120.667195][T27614] veth0_macvtap: left promiscuous mode [ 1120.674913][T27614] veth1_vlan: left promiscuous mode [ 1120.681745][T27614] veth0_vlan: left promiscuous mode [ 1120.878076][T27614] team0 (unregistering): Port device team_slave_1 removed [ 1120.892323][T27614] team0 (unregistering): Port device team_slave_0 removed [ 1120.905378][T27614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.922202][T27614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1120.973478][T27614] bond0 (unregistering): Released all slaves [ 1121.975389][T17663] chnl_net:caif_netlink_parms(): no params data found [ 1122.017306][T17663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.024742][T17663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.033451][T17663] bridge_slave_0: entered allmulticast mode [ 1122.042268][T17663] bridge_slave_0: entered promiscuous mode [ 1122.050396][T17663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.057538][T17663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.067839][T17663] bridge_slave_1: entered allmulticast mode [ 1122.075688][T17663] bridge_slave_1: entered promiscuous mode [ 1122.098418][T17663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1122.111935][T17663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1122.142046][T17663] team0: Port device team_slave_0 added [ 1122.148844][T17663] team0: Port device team_slave_1 added [ 1122.167648][T17663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.176133][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.209358][T17663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.223198][T17663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.232818][T17663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.268124][T17663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.300246][T17663] hsr_slave_0: entered promiscuous mode [ 1122.311975][T17663] hsr_slave_1: entered promiscuous mode [ 1122.321885][T17663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.332928][T17663] Cannot create hsr debugfs directory [ 1122.681895][T17663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1122.691947][T17663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1122.702883][T17663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1122.714329][T17663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1122.769422][T17663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1122.790867][T17663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1122.806208][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.814640][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1122.837961][T18335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.845387][T18335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.868317][T17663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1122.885750][T17663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1122.968563][T17663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1123.129132][T17663] veth0_vlan: entered promiscuous mode [ 1123.140984][T17663] veth1_vlan: entered promiscuous mode [ 1123.165177][T17663] veth0_macvtap: entered promiscuous mode [ 1123.177334][T17663] veth1_macvtap: entered promiscuous mode [ 1123.191523][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.205577][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.216882][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.227960][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.237866][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.248422][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.258310][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.268816][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.278683][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.289987][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.299842][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.310306][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.320182][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.330656][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.342812][T17663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.355049][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.365593][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.375600][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.386094][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.395998][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.406496][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.416774][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.427409][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.437352][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.448377][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.458434][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.468909][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.478850][T17663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.489324][T17663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.502075][T17663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.513302][T17663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.522181][T17663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.530976][T17663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.539751][T17663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:48:19 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:19 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) 12:48:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="011e2783aa080095dd85038dd74a7c44e5b1a6ff34762601dae4591b23ecc2477c4f8ce83a71847e59ce32acf982ac8a9e5d948a965796922e84d6ce577c6945c54bcdf777141d39", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x6, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x292040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x4, 0x800, 0x0, 0x9, 0x2d, 0x100000001, 0x200, 0x6c, 0x6, 0x7dd50fea, 0xfdb, 0x8fe8, 0x9a0c, 0x100000001]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x4, 0x20, 0xef3b, 0x800000000000001}, &(0x7f0000000000)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="011e2783aa080095dd85038dd74a7c44e5b1a6ff34762601dae4591b23ecc2477c4f8ce83a71847e59ce32acf982ac8a9e5d948a965796922e84d6ce577c6945c54bcdf777141d39", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x6, 0x0) (async) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x292040, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x4, 0x800, 0x0, 0x9, 0x2d, 0x100000001, 0x200, 0x6c, 0x6, 0x7dd50fea, 0xfdb, 0x8fe8, 0x9a0c, 0x100000001]}, &(0x7f0000000240)=0x100) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x4, 0x20, 0xef3b, 0x800000000000001}, &(0x7f0000000000)=0x18) (async) 12:48:19 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1123.713378][T17701] loop1: detected capacity change from 0 to 512 12:48:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="011e2783aa080095dd85038dd74a7c44e5b1a6ff34762601dae4591b23ecc2477c4f8ce83a71847e59ce32acf982ac8a9e5d948a965796922e84d6ce577c6945c54bcdf777141d39", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x6, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x292040, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e23, @empty}}, [0x8, 0x4, 0x800, 0x0, 0x9, 0x2d, 0x100000001, 0x200, 0x6c, 0x6, 0x7dd50fea, 0xfdb, 0x8fe8, 0x9a0c, 0x100000001]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x4, 0x20, 0xef3b, 0x800000000000001}, &(0x7f0000000000)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={r5, 0x4, 0x20, 0xef3b, 0x800000000000001}, &(0x7f0000000000)=0x18) [ 1123.764429][T17701] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1123.774682][T17701] EXT4-fs (loop1): group descriptors corrupted! 12:48:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBAEUi9ICHBAY4hDVVp2qImSLSqaECoHBGfADgi8Qk4wQUBJxBXuCOkCvVC4YCMxt5tQmyndlLXLf79pK1ndmd3ZnZ26tkdbwIYWNX0TxaxIyJ+jojRiHh2dYJq4+PqlQuzf165MJtFrfby71naLf64cmE2JasVUnh7cczxPCL/IIsjLfJdOHf+5Mz8/NzZIj65eOqtyYVz5584cWrm+NzxudPThw8fOjj19FPTT96Qeo6ksu5998y+PUdf+/jF2Vq8/t0Xqfw7iu1lPZaNbTjPalTr56iVhzd89FvLyIpwNtTHgtCVSkSk5hqu9//RqMRy443GC+/3tXBAT6Xv7M1NaytlYKkG/Idl0e8SAP1RftGn+99yuYnDj767fKRxA5TqfbVYGluGIk8fWxr3RiM9yr8aEa8u/fVJWqLlcwgAgBvrqzT+ebzV+C+PO1ek21nMDY1FxP8iYldE/D8idkfEHRH1tHdFxN1d5l9dFW8e//y4dV0V61Aa/z1TzG39e/yXl0nGKkVspF7/4eyNE/NzB4pzMh7Dm1N8ao08vn7+p4/abVs5/ktLyr8cCxbl+G1o1QO6YzOLMxup80qX34vYO9Sq/tm1mYAsIvZExN51HD+dsxOPfr4vhXdub96++7r1X8MNmGeqfRbxSKP9l2JV/UtZI6d285OTW2J+7sBkeVU0+/6HSy+1y//67d9bqf23tbz+r9V/LFs5X7vQfR6Xfvmw7T3Neq//Tdkr9fCmYt07M4uLZ6ciNmVLzeunl/ct42X6VP/x/a37/66Ivz8t9rsnItJFfG9E3BcR9xdlfyAiHoyI/WvU/9vnHnpz7TPU3/Y/1lX7dx+onPzmy3b5d9b+h+qh8WJNJ///dVrAjZw7AAAAuF3k9d/AZ/nEtXCeT0w0fsO/O7bl82cWFh+rxtunjzV+Kz8Ww3n5pGt0xfPQqeLZcBmfXhU/WH9uXKvValvr8YnZM/O9mlMHOrO9Tf9Pfq30u3RAz3U1j9bujTbgtuR9TRhc+j8MLv0fBpf+D4OrVf+/GHG1D0UBbjLf/zC49H8YXPo/DC79HwZS8yvx5Z9bWc+b/suBXUc3tPsABSo9OnJqw14WPvK+n7r1B/JboxiNwOaI6DTxxZ626errBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pb3TwAAAP//wGPpkA==") 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) [ 1124.283496][T17748] loop1: detected capacity change from 0 to 512 [ 1124.311931][T17748] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 1124.322156][T17748] EXT4-fs (loop1): group descriptors corrupted! 12:48:20 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:20 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:20 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1124.840668][T17780] loop1: detected capacity change from 0 to 512 [ 1124.875405][T17780] EXT4-fs (loop1): bad geometry: first data block 256 is beyond end of filesystem (256) 12:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1124.957440][T17787] loop1: detected capacity change from 0 to 512 12:48:21 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1125.088282][T17787] EXT4-fs (loop1): bad geometry: first data block 265 is beyond end of filesystem (256) 12:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) [ 1125.197610][T17792] loop1: detected capacity change from 0 to 512 [ 1125.240014][T17792] EXT4-fs (loop1): bad geometry: first data block 266 is beyond end of filesystem (256) 12:48:21 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) close(r4) 12:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:21 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffefffff) 12:48:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) (rerun: 32) close(r2) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) (async, rerun: 64) shutdown(r3, 0x1) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:21 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1125.539607][T17804] loop1: detected capacity change from 0 to 512 [ 1125.565358][T17804] EXT4-fs (loop1): bad geometry: first data block 267 is beyond end of filesystem (256) 12:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) (async) shutdown(r3, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1125.678314][T17817] loop1: detected capacity change from 0 to 512 [ 1125.717931][T17817] EXT4-fs (loop1): bad geometry: first data block 268 is beyond end of filesystem (256) 12:48:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:21 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffefffff) 12:48:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x80000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1125.846365][T17832] loop1: detected capacity change from 0 to 512 12:48:21 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) close(0xffffffffffffffff) [ 1125.902711][T17832] EXT4-fs (loop1): bad geometry: first data block 512 is beyond end of filesystem (256) 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:22 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xffefffff) [ 1126.012514][T17844] loop1: detected capacity change from 0 to 512 [ 1126.045776][T17844] EXT4-fs (loop1): bad geometry: first data block 896 is beyond end of filesystem (256) 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQAobWRAiRagwejX+BejTxL/CkF6OeNF71bkyI4SJ6MGve7gys7W7ZbVmWup9PMux7M2/mvTdvHvtm3k4DGFjV9E8WsSMifomI0RQfWpag2vi4euXC7F9XLsxmUau98keWdos/r1yYTclqhRTeXhxzPI/IP8ziSIt8F86dPzkzPz93tohPLp56e3Lh3PmnTpyaOT53fO709OHDhw5OPfvM9NM3pZ4jqax73zuzb8/R1z95abYWb3z/ZSr/jmJ7WY/rxtadZzWq9XPUyqPrPvrtZaQpnA31sSB0pVJ09+F6/x+NSlPnH40XP+hr4YCeSt/Zm1esrZSBpRrwP5ZFv0sA9Ef5RZ/uf8vlFg4/+u7ykcYNUKr31WJpbBmKPH1sadwbjfQo/2pEvLb096dpiZbPIQAAbq6v0/jnyVbjvzzubkq3s5gbGouIOyJiV0TcGRG7I+KuiHraeyLi3i7zry6Lrxz//LR1TRXrUBr/PVfMbf13/JeXScYqRWykXv/h7M0T83MHinMyHsObU3xqlTy+eeHnj9ttax7/pSXlX44Fi3L8PrTsAd2xmcWZ9dS52eX3I/YOtap/dm0mIIuIPRGxdw3HT+fsxONf7EvhndtXbt99w/qv4ibMM9U+j3is0f5Lsaz+payRU7v5ycktMT93YLK8Klb64cdLL7fL/8bt31up/be1vP6v1X8sa56vXeg+j0u/ftT2nmat1/+m7NV6eFOx7t2ZxcWzUxGbsqWV66ev71vGy/Sp/uP7W/f/XRH/fFbsd19EpIv4/oh4ICIeLMr+UEQ8HBH7V6n/d88/8tbqZ6i/7X+sq/bvPlA5+e1X7fLvrP0P1UPjxZpO/v/rtIDrOXcAAACwUeT138Bn+cS1cJ5PTDR+w787tuXzZxYWn6jGO6ePNX4rPxbDefmka7TpeehU8Wy4jE8vix+sPzeu1Wq1rfX4xOyZ+V7NqQOd2d6m/ye/VfpdOqDnuppHa/dGG7AheV8TBpf+D4NL/4fBpf/D4GrV/y9GXO1DUYBbzPc/DC79HwaX/g+DS/+HgbTylfjyz62s5U3/64FdR9e1+wAFKj06cmrDXhY+8r6furUH8tujGI3A5ojoNPHFnrbp8usHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg4/s3AAD//6cO6VQ=") 12:48:22 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1126.189179][T17854] loop1: detected capacity change from 0 to 512 [ 1126.246784][T17854] EXT4-fs (loop1): bad geometry: first data block 1024 is beyond end of filesystem (256) 12:48:22 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) close(0xffffffffffffffff) 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:22 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x80000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:22 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:22 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) [ 1126.927257][T17882] loop1: detected capacity change from 0 to 512 [ 1126.957296][T17882] EXT4-fs (loop1): bad geometry: first data block 5732 is beyond end of filesystem (256) 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) close(0xffffffffffffffff) [ 1127.099729][T17891] loop1: detected capacity change from 0 to 512 [ 1127.193756][T17891] EXT4-fs (loop1): bad geometry: first data block 5735 is beyond end of filesystem (256) 12:48:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:23 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1WatqgJEq0qGhAqR8QnAI5IfALEAS4IOIG4wh0hVagXCgdkNPZuE2I7tZO6bvHvJ209szu7M7OzU8/ueBPAwKqmf7KIHRHxc0SMpviXqxJUGx9Xr1yY/fPKhdksarWXfs/SbvHHlQuzKVmtkMLbi2OO5xH5+1kcaZHvwrnzJ2fm5+fOFvHJxVNvTi6cO//EiVMzx+eOz52ePnz40MGpp5+afvKG1HMklXXvO2f27Tn66kcvzNbite8+T+XfUWwv67FsbMN5VqNaP0etPLzho99aRlaEs6E+FoSuVCIiNddwvf+PRiWWG280nn+vr4UDeip9Z29uWlspA0s14D8si36XAOiP8os+3f+Wy00cfvTd5SONG6BU76vF0tgyFHn62NK4NxrpUf7ViHhl6a+P0xItn0MAANxYX6Xxz+Otxn953Lki3c5ibmgsIv4XEbsi4v8RsTsi7oiop70rIu7uMv/qqnjz+OfHreuqWIfS+O+ZYm7r3+O/vEwyViliI/X6D2evn5ifO1Cck/EY3pziU2vk8fVzP33YbtvK8V9aUv7lWLAox29Dqx7QHZtZnNlInVe6/G7E3qFW9c+uzQRkEbEnIvau4/jpnJ149LN9Kbxze/P23det/xpuwDxT7dOIRxrtvxSr6l/KGjm1m5+c3BLzcwcmy6ui2fc/XHqxXf7Xb//eSu2/reX1f63+Y9nK+dqF7vO49MsHbe9p1nv9b8peroc3FevenllcPDsVsSlbal4/vbxvGS/Tp/qP72/d/3dF/P1Jsd89EZEu4nsj4r6IuL8o+wMR8WBE7F+j/t8++9Aba5+h/rb/sa7av/tA5eQ3X7TLv7P2P1QPjRdrOvn/r9MCbuTcAQAAwO0ir/8GPssnroXzfGKi8Rv+3bEtnz+zsPhYNd46fazxW/mxGM7LJ12jK56HThXPhsv49Kr4wfpz41qtVttaj0/Mnpnv1Zw60Jntbfp/8mul36UDeq6rebR2b7QBtyXva8Lg0v9hcOn/MLj0fxhcrfr/xYirfSgKcJP5/ofBpf/D4NL/YXDp/zCQml+JL//cynre9F8O7Dq6od0HKFDp0ZFTG/ay8JH3/dStP5DfGsVoBDZHRKeJL/a0TVdfPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALe/fwIAAP//4unqDA==") 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvW15l/bHDx8g6igaGx8tLags3GA0YWNiogtd1lIJUsDQmgghUo3BpfEvUJcm/gWudGPUlcat7o0JMWxEF2bMmbm3LZ2ZMtMyDHU+n+Qy59zXOeeee7jn3nNvA+hblfRPFrErIn6JiJGIqFYHblyhUv+5fu3SzF/XLs1kUa2+8keWNos/r12aido2dSm8s9jnWB6Rf5jFsSbpzl+4eHp6bm72fBGfWDjz9sT8hYtPnTozfXL25OzZqaNHjxyefPaZqadvSTmHU173v3fuwL7jr3/y0kw13vj+y5T/XcXyshzLRjecZiUqtWPUzKMb3vudZXhFOBvsYUboSGrpqbqGau1/JAZiufJG4sUPepo5oKvSNXtrw9yl6/9iFfgPy6LXOQB6o7zQp/vfcrqN3Y+eu3qsfgOUyn29mOpLBiNPP9vq90bDXUq/EhGvLf79aZqi6XMIAIBb6+vU/3myWf8vj7tXrLe7GBsajYj/RcSeiPh/ROyNiLsiauveExH3dph+ZVW8sf/z0/Z1FaxNqf/3XDG2dWP/Ly9XGR0oYsO18g9lb56amz1UHJOxGNqa4pNrpPHNCz9/3GrZyv5fmlL6ZV+wyMfvg6se0J2YXpjeSJlXuvp+xP7BZuXPlkYCsojYFxH717H/dMxOPf7FgRTevbNx+d6bln8Nt2Ccqfp5xGP1+l+MVeUvZfWUWo1PTmyLudlDE+VZ0eiHH6+83Cr9m9d/d6X639H0/F8q/2i2crx2vvM0rvz6Uct7mvWe/1uyV2vhLcW8d6cXFs5PRmzJFhvnTy1vW8bL9VP5xw42b/97Iv75rNjuvohIJ/H9EfFARDxY5P2hiHg4Ig6uUf7vnn/krbWPUG/r/0RH9d95YOD0t1+1Sr+9+j9SC40Vc9r5/6/dDG7k2AEAAMBmkdfegc/y8aVwno+P19/h3xs78rlz8wtPVOKdsyfq78qPxlBePukaWfE8dLJ4NlzGp1bFD9eeG1er1er2Wnx85txct8bUgfbsbNH+k98Gep07oOs6Gkdr9UUbsCn5XhP6l/YP/Uv7h/6l/UP/atb+L0dc70FWgNvM9R/6l/YP/Uv7h/6l/UNfavwkvvxzK+v50n85sOf4hjbvo8BAl/ac6rCbmY+854du/YH8zshGPbA1Itpd+XJX63T1+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALD5/RsAAP//ASzrUQ==") 12:48:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept4(r0, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x80000) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) accept4(r0, &(0x7f0000000180)=@rc={0x1f, @fixed}, &(0x7f0000000000)=0x80, 0x80000) (async) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:23 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="df7fc59d474a0d6101115e2926000001000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) socket(0x15, 0x80000, 0x401) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:23 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:23 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:23 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvdPyLu2PHz5A1FE0Nj5aWlBZuMFowsbERBe6rKUSZABDayKESDUGl8a/QF2a+Be40o1RVxq3ujcmxLARXZhr7sy9dOjMlJmWYcD5fJLLnHNf55x77mHOPWduAxha1fyfJGJHRPwSEeMRkWXZxet2qDY+rl65MP/XlQvzSWTZK38k+WHx55UL89E4pi4Pby/OOZlGpB8mcaRNuovnzp+cq9UWzhbx6aVTb08vnjv/1IlTc8cXji+cnj18+NDBmWefmX36ppRzLM/r3vfO7Ntz9PVPXprP4o3vv8zzv6PYXpZjxcSG06xGtX6N2nl0w2e/vYw1hZORAWaEnlQiIq+u0Xr7H49KrFTeeLz4wUAzB/RV/p29uWVtpQwsZ8B/WBKDzgEwGOUXff78Wy63sPsxcJePNB6A8nJfLZbGlpFI848tjWejsT6lX42I15b//jRfou04BADAzfV13v95sl3/L427m/bbWcwNTUTE/yJiV0T8PyJ2R8RdEfV974mIe3tMv7oq3tr/+WnrugrWpbz/91wxt3V9/y8td5moFLGxevlHkzdP1BYOFNdkMkY35/GZNdL45oWfP+60rbn/ly95+mVfsMjH7yOrBuiOzS3NbaTMzS6/H7F3pF35k2szAUlE7ImIves4f37NTjz+xb48vHN76/bdNyz/Gm7CPFP2ecRjjfpfjlXlLyWNlDrNT05vidrCgenyrmj1w4+XXu6U/o3rv7/y+t/W9v6/Vv6JpHm+drH3NC79+lHHZ5r13v+bklfr4U3FunfnlpbOzkRsSpZb18+uHFvGy/3z8k/ub9/+d0X881lx3H0Rkd/E90fEAxHxYJH3hyLi4YjYv0b5v3v+kbfWvkKDrf9jPdV/74HKyW+/6pR+d/V/qB6aLNZ08/9ftxncyLUDAACAO0Va/w18kk5dC6fp1FTjN/y7Y1taO7O49EQ13jl9rPFb+YkYTcuRrvGm8dCZYmy4jM+uih+sjxtnWZZtrcen5s/U+jWnDnRne4f2n/utMujcAX3X0zxapzfagDuS9zVheGn/MLy0fxhe2j8Mr3bt/2LE1QFkBbjFfP/D8NL+YXhp/zC8tH8YSq2vxJd/bmU9b/qvBHYd3dDhQxSo9OnMeR32M/ORDvzSrT+Q3h7ZaAQ2R0S3O1/sa52uvn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADufP8GAAD//0yV7Mw=") 12:48:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:24 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="df7fc59d474a0d6101115e2926000001000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) (async, rerun: 32) socket(0x15, 0x80000, 0x401) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1129.440192][T27614] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.517895][T27614] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.622805][T27614] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.698054][T27614] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.236346][T27614] hsr_slave_0: left promiscuous mode [ 1130.243516][T27614] hsr_slave_1: left promiscuous mode [ 1130.251508][T27614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.260383][T27614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.272040][T27614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.280146][T27614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.290444][T27614] bridge_slave_1: left allmulticast mode [ 1130.296366][T27614] bridge_slave_1: left promiscuous mode [ 1130.302270][T27614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.315469][T27614] bridge_slave_0: left allmulticast mode [ 1130.321820][T27614] bridge_slave_0: left promiscuous mode [ 1130.327697][T27614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.340910][T27614] veth1_macvtap: left promiscuous mode [ 1130.346460][T27614] veth0_macvtap: left promiscuous mode [ 1130.351997][T27614] veth1_vlan: left promiscuous mode [ 1130.357295][T27614] veth0_vlan: left promiscuous mode [ 1130.502390][T27614] team0 (unregistering): Port device team_slave_1 removed [ 1130.514615][T27614] team0 (unregistering): Port device team_slave_0 removed [ 1130.525492][T27614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.539538][T27614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.579617][T27614] bond0 (unregistering): Released all slaves [ 1131.310378][T17971] chnl_net:caif_netlink_parms(): no params data found [ 1131.355777][T17971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.368288][T17971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.380855][T17971] bridge_slave_0: entered allmulticast mode [ 1131.391802][T17971] bridge_slave_0: entered promiscuous mode [ 1131.403437][T17971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.414161][T17971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.427375][T17971] bridge_slave_1: entered allmulticast mode [ 1131.439424][T17971] bridge_slave_1: entered promiscuous mode [ 1131.466300][T17971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1131.483192][T17971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1131.513113][T17971] team0: Port device team_slave_0 added [ 1131.520888][T17971] team0: Port device team_slave_1 added [ 1131.541236][T17971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1131.550623][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.588897][T17971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1131.603412][T17971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.611791][T17971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1131.642708][T17971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1131.677567][T17971] hsr_slave_0: entered promiscuous mode [ 1131.684365][T17971] hsr_slave_1: entered promiscuous mode [ 1131.690842][T17971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1131.703407][T17971] Cannot create hsr debugfs directory [ 1131.972122][T17971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1131.982087][T17971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1131.992414][T17971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1132.003479][T17971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1132.051896][T17971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.074875][T17971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.085336][T14429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.092514][T14429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.116879][T14429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.125250][T14429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.148229][T17971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.214158][T17971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.357628][T17971] veth0_vlan: entered promiscuous mode [ 1132.367779][T17971] veth1_vlan: entered promiscuous mode [ 1132.390672][T17971] veth0_macvtap: entered promiscuous mode [ 1132.401571][T17971] veth1_macvtap: entered promiscuous mode [ 1132.418260][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.430934][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.441793][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.453535][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.464774][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.475527][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.486366][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.497210][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.508752][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.520748][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.531626][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.543353][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.554299][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.565516][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.579198][T17971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1132.591275][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.602722][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.614908][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.626414][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.638697][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.650381][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.660715][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.672884][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.683041][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.695044][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.706916][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.721056][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.732423][T17971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1132.745824][T17971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.761130][T17971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1132.773130][T17971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.782514][T17971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.792169][T17971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.801105][T17971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:48:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="df7fc59d474a0d6101115e2926000001000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) socket(0x15, 0x80000, 0x401) (async) socket(0x15, 0x80000, 0x401) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1132.973477][T18014] loop1: detected capacity change from 0 to 512 12:48:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1133.061024][T18014] EXT4-fs (loop1): Invalid log block size: 4294967295 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1133.220411][T18034] loop1: detected capacity change from 0 to 512 [ 1133.248894][T18034] EXT4-fs (loop1): #blocks per group too big: 16384 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:29 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1133.359359][T18039] loop1: detected capacity change from 0 to 512 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1133.404217][T18039] EXT4-fs (loop1): #blocks per group too big: 24576 [ 1133.480396][T18048] loop1: detected capacity change from 0 to 512 12:48:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1133.560166][T18048] EXT4-fs (loop1): inodes count not valid: 32 vs 256 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1133.653968][T18060] loop1: detected capacity change from 0 to 512 12:48:29 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1133.715622][T18060] EXT4-fs (loop1): #blocks per group too big: 16384 12:48:29 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8, 0x800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) r2 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000800), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="00004f2ef583cd97953100005812ca7e9c772d691f783951273b71792d94cdcf9d384c1bd81adf8a7b0a5bad8a660200f7c83e1e9c0c806733f8f8af83622e35a16c5601471bd63300"/88, @ANYRES32=r2], &(0x7f000095dffc)=0x8) r4 = socket(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002780)={0x9, 0x0, &(0x7f00000026c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/38, 0x26}, {&(0x7f00000016c0)=""/4096, 0x1000}], &(0x7f0000002740)=[0x6], 0x8}, 0x20) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUKhobf7S0oHLwgtGEi4mJHvRmLZUgBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQw0X0YNa83Rm6tLtlt2VZ6n4+ybTvzbyd9968ed0382YaQN8aTT+yiB0R8WtEDNejS96oJ0rprl65MPP3lQszWVSrr/yZ1dL9deXCTEpWLaTw9mKfY3lE/lEWR5rkO3/u/MnpubnZs0V8YuHUOxPz584/deLU9PHZ47Onpw4fPnRw8tlnpp6+KfUcSmXd+/6ZfXuOvv7pSzPVePOHr1L5dxTby3osGVl3nqMxev2xbPDouvd+exlqCGcDPSwIHalERGquwVr/H45KLDXecLz4YU8LB3RV+s7evGJtpQwsVoH/sSx6XQKgN8ov+nT9Wy63cPjRc5eP1C+AUr2vFkt9y0Dk6deW+rXRUJfyH42I1xb/+Swt0fQ+BADAzfVNGv882Wz8l8fdDel2FnNDIxFxR0Tsiog7I2J3RNwVUUt7T0Tc22H+o8viK8c/P29dU8XalMZ/zxVzW9eP//IyyUiliA3V6j+YvXVibvZAcUzGYnBzik+ukse3L/zySattjeO/tKT8y7FgUY4/BpbdoDs2vTC9njo3uvxBxN6BZvXPrs0EZBGxJyL2rmH/6ZidePzLfSm8c/vK7btvWP9V3IR5puoXEY/V238xltW/lNVzajU/ObEl5mYPTJRnxUo//nTp5Vb537j9uyu1/7am5/+1+o9kjfO1853ncem3j1te06z1/N+UvVoLbyrWvTe9sHB2MmJTtrhy/dTSZ8t4mT7Vf2x/8/6/K+Lfz4vP3RcR6SS+PyIeiIgHi7I/FBEPR8T+Ver//fOPvL36Eept+x/rqP07D1ROfvd1q/zba/9DtdBYsaadv3/tFnA9xw4AAAA2irz2DHyWj18L5/n4eP0Z/t2xLZ87M7/wxGi8e/pY/Vn5kRjMyztdww33QyeLe8NlfGpZ/GDtvnG1Wq1urcXHZ87MdWtOHWjP9hb9P/m90uvSAV3X0TxaqzfagA3J+5rQv/R/6F/6P/Qv/R/6V7P+fzHiag+KAtxivv+hf+n/0L/0f+hf+j/0pZWvxJf/bmUtb/ovBXYdXdfH+yhQ6dKeUxt2s/CR9/zQrT2Q3x7FqAc2R0S7iS92tU2Xnz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb338BAAD//7lL6ZE=") 12:48:29 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1133.861148][T18070] loop1: detected capacity change from 0 to 512 [ 1133.893559][T18070] EXT4-fs (loop1): #blocks per group too big: 24576 12:48:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1133.982747][T18081] loop1: detected capacity change from 0 to 512 [ 1134.011799][T18081] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1134.033352][T18081] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1134.042691][T18081] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1134.077503][T18081] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1134.088384][T18081] EXT4-fs (loop1): 1 truncate cleaned up [ 1134.094214][T18081] EXT4-fs mount: 13 callbacks suppressed [ 1134.094230][T18081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1134.150818][T16572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:30 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1134.272844][T18098] loop1: detected capacity change from 0 to 512 [ 1134.316546][T18098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1134.335620][T18098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1134.351011][T18098] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1134.363189][T18098] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1134.378999][T18098] EXT4-fs (loop1): 1 truncate cleaned up [ 1134.385781][T18098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1134.417823][T16572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:30 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8, 0x800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) r2 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000800), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="00004f2ef583cd97953100005812ca7e9c772d691f783951273b71792d94cdcf9d384c1bd81adf8a7b0a5bad8a660200f7c83e1e9c0c806733f8f8af83622e35a16c5601471bd63300"/88, @ANYRES32=r2], &(0x7f000095dffc)=0x8) r4 = socket(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002780)={0x9, 0x0, &(0x7f00000026c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/38, 0x26}, {&(0x7f00000016c0)=""/4096, 0x1000}], &(0x7f0000002740)=[0x6], 0x8}, 0x20) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8, 0x800) (async) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000800), 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="00004f2ef583cd97953100005812ca7e9c772d691f783951273b71792d94cdcf9d384c1bd81adf8a7b0a5bad8a660200f7c83e1e9c0c806733f8f8af83622e35a16c5601471bd63300"/88, @ANYRES32=r2], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002780)={0x9, 0x0, &(0x7f00000026c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/38, 0x26}, {&(0x7f00000016c0)=""/4096, 0x1000}], &(0x7f0000002740)=[0x6], 0x8}, 0x20) (async) close(r4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r4, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:30 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1134.750296][T18116] loop1: detected capacity change from 0 to 512 [ 1134.777272][T18116] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:48:30 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1134.853875][T18116] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1134.903135][T18116] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1134.968289][T18116] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1135.020081][T18116] EXT4-fs (loop1): 1 truncate cleaned up [ 1135.025921][T18116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1135.099821][T16572] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:31 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000000]}, 0x8, 0x800) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x14, 0x1, 0x5, 0x201, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async, rerun: 64) r2 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) (rerun: 64) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000800), 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="00004f2ef583cd97953100005812ca7e9c772d691f783951273b71792d94cdcf9d384c1bd81adf8a7b0a5bad8a660200f7c83e1e9c0c806733f8f8af83622e35a16c5601471bd63300"/88, @ANYRES32=r2], &(0x7f000095dffc)=0x8) (async, rerun: 64) r4 = socket(0xa, 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000002780)={0x9, 0x0, &(0x7f00000026c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {}, {&(0x7f00000012c0)=""/239, 0xef}, {&(0x7f00000013c0)=""/231, 0xe7}, {&(0x7f00000014c0)=""/251, 0xfb}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/38, 0x26}, {&(0x7f00000016c0)=""/4096, 0x1000}], &(0x7f0000002740)=[0x6], 0x8}, 0x20) close(r4) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) (async, rerun: 32) sendmmsg$inet_sctp(r4, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:31 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:31 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1135.207444][T18149] loop1: detected capacity change from 0 to 512 12:48:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = fcntl$dupfd(r0, 0x0, r2) sendmmsg$inet_sctp(r3, &(0x7f0000000100), 0x8, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1135.261108][T18149] EXT4-fs (loop1): invalid inodes per group: 0 [ 1135.261108][T18149] 12:48:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1135.393599][T18186] loop1: detected capacity change from 0 to 512 12:48:31 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:31 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) [ 1135.467006][T18186] EXT4-fs (loop1): invalid inodes per group: 1 [ 1135.467006][T18186] 12:48:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:32 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:32 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:32 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0iYzu+OdmZ2deHZnNwEMrHL2I4nYExG/RMRoPboyQTliKCJu3rgy+9eNK7NJVKuv/JHU0v1548pslqyay8K7832OpxHph0mcaJHv/KXLZ2cqlbmLeXxy4dzbk/OXLj915tzM6bnTc+enjx8/dnTq2Wemn96Ueo5kZT343oVDB06+/slLs9V44/svs/LvybcX9Vg2tuE8y1FeeSwbPLrhvd9ZRhrCyVAfC0JXSlHv28O1/j8apVhuvNF48YO+Fg7oqew7e3vT2lIRWKwC/2FJ9LsEQH8UX/TZ9W+x3MbhR99dP1G/AMrqfTNf6luGIs1+7ahfG430KP9yRLy2+Pen2RIt70MAAGyur7Pxz5Otxn9p3N2Qbm8+NzQWEf+LiH0R8f+I2B8Rd0XU0t4TEfd2mX95Vbx5/PPTznVVrEPZ+O+5fG5r5fgvLZKMlfLYSK3+w8mbZypzR/JjMh7D27P41Bp5fPPCzx+329Y4/suWLP9iLJiX4/ehVTfoTs0szGykzo2uvx9xcKhV/ZOlmYAkIg5ExMF17D87Zmce/+JQFt67u3n7/lvWfw2bMM9U/TzisXr7L8aq+heSek7t5icnd0Rl7shkcVY0++HHay+3y//W7d9bWfvvann+L9V/LGmcr53vPo9rv37U9ppmvef/tuTVWnhbvu7dmYWFi1MR25LF5vXTy58t4kX6rP7jh1v3/30R/3yWf+6+iMhO4vsj4oGIeDAv+0MR8XBEHF6j/t89/8hbax+h/rb/qa7av/tA6ey3X7XLv7P2P1YLjedrOvn712kBN3LsAAAAYKtIa8/AJ+nEUjhNJybqz/Dvj11p5cL8whPleOf8qfqz8mMxnBZ3ukYb7odO5feGi/j0qvjR2n3jarVa3VmLT8xeqPRqTh3ozO42/T/zW6nfpQN6rqt5tHZvtAFbkvc1YXDp/zC49H8YXPo/DK5W/f9qxM0+FAW4zXz/w+DS/2Fw6f8wuPR/GEjNr8QX/25lPW/6Lwf2ndzQxwcoUOrRnrM27GXhI+37oVt/IL0zilEPbI+IThNf7Wmbrj5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtr5/AwAA//8geek1") 12:48:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) (rerun: 64) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) r3 = fcntl$dupfd(r0, 0x0, r2) sendmmsg$inet_sctp(r3, &(0x7f0000000100), 0x8, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0iYzu+OdmZ2deHZnNwEMrHL2I4nYExG/RMRoPboyQTliOCJu3rgy+9eNK7NJVKuv/JHU0v1548pslqyay8K7832OpxHph0mcaJHv/KXLZ2cqlbmLeXxy4dzbk/OXLj915tzM6bnTc+enjx8/dnTq2Wemn96Ueo5kZT343oVDB06+/slLs9V44/svs/LvybcX9Vg2tuE8y1FeeSwbPLrhvd9ZRhrCyVAfC0JXShGRNddwrf+PRimWG280Xvygr4UDeir7zt7etLZUBBarwH9YEv0uAdAfxRd9dv1bLLdx+NF310/UL4Cyet/Ml/qWoUizXzvq10YjPcq/HBGvLf79abZEy/sQAACb6+ts/PNkq/FfGnc3pNubzw2NRcT/ImJfRPw/IvZHxF0RtbT3RMS9XeZfXhVvHv/8tHNdFetQNv57Lp/bWjn+S4skY6U8NlKr/3Dy5pnK3JH8mIzH8PYsPrVGHt+88PPH7bY1jv+yJcu/GAvm5fh9aNUNulMzCzMbqXOj6+9HHBxqVf9kaSYgiYgDEXFwHfvPjtmZx784lIX37m7evv+W9V/DJswzVT+PeKze/ouxqv6FpJ5Tu/nJyR1RmTsyWZwVzX748drL7fK/dfv3Vtb+u1qe/0v1H0sa52vnu8/j2q8ftb2mWe/5vy15tRbelq97d2Zh4eJUxLZksXn99PJni3iRPqv/+OHW/X9fxD+f5Z+7LyKyk/j+iHggIh7My/5QRDwcEYfXqP93zz/y1tpHqL/tf6qr9u8+UDr77Vft8u+s/Y/VQuP5mk7+/nVawI0cOwAAANgq0toz8Ek6sRRO04mJ+jP8+2NXWrkwv/BEOd45f6r+rPxYDKfFna7RhvuhU/m94SI+vSp+tHbfuFqtVnfW4hOzFyq9mlMHOrO7Tf/P/Fbqd+mAnutqHq3dG23AluR9TRhc+j8MLv0fBpf+D4OrVf+/GnGzD0UBbjPf/zC49H8YXPo/DC79HwZS8yvxxb9bWc+b/suBfSc39PEBCpR6tOesDXtZ+Ej7fujWH0jvjGLUA9sjotPEV3vapqvPHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK3v3wAAAP//HI3pNg==") 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:32 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r7, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 12:48:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0iYzu+OdmZ2deHZnNwEMrHL2I4nYExG/RMRoPboyQTliR0TcvHFl9q8bV2aTqFZf+SOppfvzxpXZLFk1l4V35/scTyPSD5M40SLf+UuXz85UKnMX8/jkwrm3J+cvXX7qzLmZ03On585PHz9+7OjUs89MP70p9RzJynrwvQuHDpx8/ZOXZqvxxvdfZuXfk28v6rFsbMN5lqO88lg2eHTDe7+zjDSEk6E+FoSulCIia67hWv8fjVIsN95ovPhBXwsH9FT2nb29aW2pCCxWgf+wJPpdAqA/ii/67Pq3WG7j8KPvrp+oXwBl9b6ZL/UtQ5Fmv3bUr41GepR/OSJeW/z702yJlvchAAA219fZ+OfJVuO/NO5uSLc3nxsai4j/RcS+iPh/ROyPiLsiamnviYh7u8y/vCrePP75aee6KtahbPz3XD63tXL8lxZJxkp5bKRW/+HkzTOVuSP5MRmP4e1ZfGqNPL554eeP221rHP9lS5Z/MRbMy/H70KobdKdmFmY2UudG19+PODjUqv7J0kxAEhEHIuLgOvafHbMzj39xKAvv3d28ff8t67+GTZhnqn4e8Vi9/RdjVf0LST2ndvOTkzuiMndksjgrmv3w47WX2+V/6/bvraz9d7U8/5fqP5Y0ztfOd5/HtV8/antNs97zf1vyai28LV/37szCwsWpiG3JYvP66eXPFvEifVb/8cOt+/++iH8+yz93X0RkJ/H9EfFARDyYl/2hiHg4Ig6vUf/vnn/krbWPUH/b/1RX7d99oHT226/a5d9Z+x+rhcbzNZ38/eu0gBs5dgAAALBVpLVn4JN0YimcphMT9Wf498eutHJhfuGJcrxz/lT9WfmxGE6LO12jDfdDp/J7w0V8elX8aO2+cbVare6sxSdmL1R6NacOdGZ3m/6f+a3U79IBPdfVPFq7N9qALcn7mjC49H8YXPo/DC79HwZXq/5/NeJmH4oC3Ga+/2Fw6f8wuPR/GFz6Pwyk5lfii3+3sp43/ZcD+05u6OMDFCj1aM9ZG/ay8JH2/dCtP5DeGcWoB7ZHRKeJr/a0TVefPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvfvwEAAP//EMnpOQ==") 12:48:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0iYzu+OdmZ2deHZnNwEMrHL2I4nYExG/RMRoPboyQTliV0TcvHFl9q8bV2aTqFZf+SOppfvzxpXZLFk1l4V35/scTyPSD5M40SLf+UuXz85UKnMX8/jkwrm3J+cvXX7qzLmZ03On585PHz9+7OjUs89MP70p9RzJynrwvQuHDpx8/ZOXZqvxxvdfZuXfk28v6rFsbMN5lqO88lg2eHTDe7+zjDSEk6E+FoSulCIia67hWv8fjVIsN95ovPhBXwsH9FT2nb29aW2pCCxWgf+wJPpdAqA/ii/67Pq3WG7j8KPvrp+oXwBl9b6ZL/UtQ5Fmv3bUr41GepR/OSJeW/z702yJlvchAAA219fZ+OfJVuO/NO5uSLc3nxsai4j/RcS+iPh/ROyPiLsiamnviYh7u8y/vCrePP75aee6KtahbPz3XD63tXL8lxZJxkp5bKRW/+HkzTOVuSP5MRmP4e1ZfGqNPL554eeP221rHP9lS5Z/MRbMy/H70KobdKdmFmY2UudG19+PODjUqv7J0kxAEhEHIuLgOvafHbMzj39xKAvv3d28ff8t67+GTZhnqn4e8Vi9/RdjVf0LST2ndvOTkzuiMndksjgrmv3w47WX2+V/6/bvraz9d7U8/5fqP5Y0ztfOd5/HtV8/antNs97zf1vyai28LV/37szCwsWpiG3JYvP66eXPFvEifVb/8cOt+/++iH8+yz93X0RkJ/H9EfFARDyYl/2hiHg4Ig6vUf/vnn/krbWPUH/b/1RX7d99oHT226/a5d9Z+x+rhcbzNZ38/eu0gBs5dgAAALBVpLVn4JN0YimcphMT9Wf498eutHJhfuGJcrxz/lT9WfmxGE6LO12jDfdDp/J7w0V8elX8aO2+cbVare6sxSdmL1R6NacOdGZ3m/6f+a3U79IBPdfVPFq7N9qALcn7mjC49H8YXPo/DC79HwZXq/5/NeJmH4oC3Ga+/2Fw6f8wuPR/GFz6Pwyk5lfii3+3sp43/ZcD+05u6OMDFCj1aM9ZG/ay8JH2/dCtP5DeGcWoB7ZHRKeJr/a0TVefPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvfvwEAAP//CPHpOw==") 12:48:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+pWny9CkvLQUMBRHxkjRpgR64FIHUCxISHOAY0lCVui1qgkSrigaEyhHxCYAjEp+AE1wQcAJxhTtCqlAvFA7IaO3dxont1E7iusG/n7TJzO54Z2ZnJ57d2U0AA6uc/UgidkfELxExVo+uTFCOGImIG9cvz/11/fJcEtXqK38ktXR/Xr88lyWr5rLwSL7PiTQi/TCJ4y3yXbh46cxspTJ/IY9PLZ59e2rh4qWnTp+dPTV/av7czLFjR49MP/vMzNObUs/RrKwH3jt/cP+J1z95aa4ab3z/ZVb+3fn2oh7LxjecZznKK49lg0c3vPc7y2hDOBnqY0HoSikisuYarvX/sSjFcuONxYsf9LVwQE9l39nbm9aWisBSFfgPS6LfJQD6o/iiz65/i+U2Dj/67trx+gVQVu8b+VLfMhRp9mtH/dpotEf5lyPitaW/P82WaHkfAgBgc32djX+ebDX+S+PuhnR78rmh8Yj4X0TsjYj/R8S+iLgropb2noi4t8v8y6vizeOfn3auq2IdysZ/z+VzWyvHf2mRZLyUx0Zr9R9O3jxdmT+cH5OJGN6exafXyOObF37+uN22xvFftmT5F2PBvBy/D626QXdydnF2I3VudO39iANDreqf3JwJSCJif0QcWMf+s2N2+vEvDmbhPSPN2/fdsv5r2IR5purnEY/V238pVtW/kNRzajc/ObUjKvOHp4qzotkPP159uV3+t27/3sraf1fL8/9m/ceTxvnahe7zuPrrR22vadZ7/m9LXq2Ft+Xr3p1dXLwwHbEtWWpeP7P82SJepM/qP3Godf/fG/HPZ/nn7ouI7CS+PyIeiIgH87I/FBEPR8ShNer/3fOPvLX2Eepv+5/sqv27D5TOfPtVu/w7a/+jtdBEvqaTv3+dFnAjxw4AAAC2irT2DHySTt4Mp+nkZP0Z/n2xK62cX1h8ohzvnDtZf1Z+PIbT4k7XWMP90On83nARn1kVP1K7b1ytVqs7a/HJufOVXs2pA50ZadP/M7+V+l06oOe6mkdr90YbsCV5XxMGl/4Pg0v/h8Gl/8PgatX/r0Tc6ENRgNvM9z8MLv0fBpf+D4NL/4eB1PxKfPHvVtbzpv9yYO+JDX18gAKlHu05a8NeFj7Svh+69QfSO6MY9cD2iOg08ZWetunq8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+zcAAP//BQXpPA==") 12:48:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = fcntl$dupfd(r0, 0x0, r2) sendmmsg$inet_sctp(r3, &(0x7f0000000100), 0x8, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:33 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1137.369737][T18281] loop1: detected capacity change from 0 to 512 12:48:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) [ 1137.410524][T18281] EXT4-fs (loop1): inodes count not valid: 32 vs 15 12:48:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0iYzu+OdmZ2deHZnNwEMrHL2I4nYExG/RMRoPboyQTliX0TcvHFl9q8bV2aTqFZf+SOppfvzxpXZLFk1l4V35/scTyPSD5M40SLf+UuXz85UKnMX8/jkwrm3J+cvXX7qzLmZ03On585PHz9+7OjUs89MP70p9RzJynrwvQuHDpx8/ZOXZqvxxvdfZuXfk28v6rFsbMN5lqO88lg2eHTDe7+zjDSEk6E+FoSulCIia67hWv8fjVIsN95ovPhBXwsH9FT2nb29aW2pCCxWgf+wJPpdAqA/ii/67Pq3WG7j8KPvrp+oXwBl9b6ZL/UtQ5Fmv3bUr41GepR/OSJeW/z702yJlvchAAA219fZ+OfJVuO/NO5uSLc3nxsai4j/RX0+6P8RsT8i7oqopb0nIu7tMv/yqnjz+OenneuqWIey8d9z+dzWyvFfWiQZK+WxkVr9h5M3z1TmjuTHZDyGt2fxqTXy+OaFnz9ut61x/JctWf7FWDAvx+9Dq27QnZpZmNlInRtdfz/i4FCr+idLMwFJRByIiIPr2H92zM48/sWhLLx3d/P2/bes/xo2YZ6p+nnEY/X2X4xV9S8k9ZzazU9O7ojK3JHJ4qxo9sOP115ul/+t27+3svbf1fL8X6r/WNI4XzvffR7Xfv2o7TXNes//bcmrtfC2fN27MwsLF6citiWLzeunlz9bxIv0Wf3HD7fu//si/vks/9x9EZGdxPdHxAMR8WBe9oci4uGIOLxG/b97/pG31j5C/W3/U121f/eB0tlvv2qXf2ftf6wWGs/XdPL3r9MCbuTYAQAAwFaR1p6BT9KJpXCaTkzUn+HfH7vSyoX5hSfK8c75U/Vn5cdiOC3udI023A+dyu8NF/HpVfGjtfvG1Wq1urMWn5i9UOnVnDrQmd1t+n/mt1K/Swf0XFfzaO3eaAO2JO9rwuDS/2Fw6f8wuPR/GFyt+v/ViJt9KApwm/n+h8Gl/8Pg0v9hcOn/MJCaX4kv/t3Ket70Xw7sO7mhjw9QoNSjPWdt2MvCR9r3Q7f+QHpnFKMe2B4RnSa+2tM2XX3+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbH3/BgAA///pgulD") 12:48:33 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:34 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1138.146473][T18329] loop1: detected capacity change from 0 to 512 [ 1138.200697][T18329] EXT4-fs (loop1): inodes count not valid: 32 vs 23 12:48:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) 12:48:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpO+04RSHn0AhoKIeCRNWqAHLkUg9YKEBAc4hjRUpW6LmiDRqqIBoXJEfALgiMQn4AQXBJxAXOGOkCrUC4UDMlp7t3FiO7WTuG7w7ydtMrM73pnZ2Ylnd3YTwMAqZz+SiF0R8WtEjNajyxOUIw5ExI3rl2f/vn55Nolq9dU/k1q6v65fns2SVXNZeGe+z/E0Iv0oieMt8p2/eOnMTKUydyGPTy6cfWdy/uKlp0+fnTk1d2ru3PSxY0ePTD337PQzG1LPkays+98/f3DfiTc+fXm2Gm/+8FVW/l359qIeS8bWnWc5ysuPZYPH1r33O8tIQzgZ6mNB6EopIrLmGq71/9EoxVLjjcZLH/a1cEBPZd/ZW5vWlorAYhX4H0ui3yUA+qP4os+uf4vlNg4/+u7a8foFUFbvG/lS3zIUafZrW/3aaKRH+Zcj4vXFfz7Llmh5HwIAYGN9k41/nmo1/kvj3oZ0u/O5obGIuCsi9kTE3RGxNyLuiailvS8i7u8y//KKePP45+fta6pYh7Lx3/P53Nby8V9aJBkr5bGRWv2Hk7dOV+YO58dkPIa3ZvGpVfL49sVfPmm3rXH8ly1Z/sVYMC/HH0MrbtCdnFmYWU+dG137IGL/UKv6JzdnApKI2BcR+9ew/+yYnX7iy4NZePfO5u17b1n/VWzAPFP1i4jH6+2/GCvqX0jqObWbn5zcFpW5w5PFWdHsx5+uvtIu/1u3f29l7b+j5fl/s/5jSeN87Xz3eVz97eO21zRrPf+3JK/Vwlvyde/NLCxcmIrYkiw2r59e+mwRL9Jn9R8/1Lr/74n49/P8cwciIjuJH4iIByPiobzsD0fEIxFxaJX6f//Co2+vfoT62/4nu2r/7gOlM9993S7/ztr/aC00nq/p5O9fpwVcz7EDAACAzSKtPQOfpBM3w2k6MVF/hn9v7Egr5+cXnizHu+dO1p+VH4vhtLjTNdpwP3QqvzdcxKdXxI/U7htXq9Xq9lp8YvZ8pVdz6kBndrbp/5nfS/0uHdBzXc2jtXujDdiUvK8Jg0v/h8Gl/8Pg0v9hcLXq/1cibvShKMBt5vsfBpf+D4NL/4fBpf/DQGp+Jb74dytredN/KbDnxLo+PkCBUo/2nLVhLwsfad8P3doD6Z1RjHpga0R0mvhKT9t05fkDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw+f0XAAD//8Y26Uw=") [ 1138.331825][T18338] loop1: detected capacity change from 0 to 512 [ 1138.353718][T18338] EXT4-fs (loop1): inodes count not valid: 32 vs 27 12:48:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) 12:48:34 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:34 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:34 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) 12:48:35 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1139.253418][ T9433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:35 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:35 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1139.395359][ T9433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0xffffffffffffffff) [ 1139.531499][ T9433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.634587][ T9433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:35 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x9d9, @local, 0xffffce30}}, 0x45, 0x6, 0x5, 0x6, 0x6}, &(0x7f0000000200)=0x98) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000780)={r7, 0x4}, &(0x7f00000007c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001e40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3ff, @remote, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="cd571cce71737cacc1488d108ba42a86f6e7f0669ab234ebd17f2cb01816b93feb9e11739fc08c390ce434799cb6c3e3a31cc7c3ce62559058f54cf4d56b76395d1372a667c07062e64dcc441480e9a378644c85", 0x54}, {&(0x7f0000000080)="b826879d4759e53660d0dbcbb2ebbceb40f1e5d9c15cf7afbc2bbd8b936bde0f81d006f57b758680a27dfbab372be05d6856bdee13b36d9977b7b52c89c60c49", 0x40}, {&(0x7f0000000280)="b877e1e5d6b4cd9b2fce176fbe098401408f33b31958e17af25a1f199c2d62107238e26d79415e1d513166832387e056eeb8c3b48ca0f65b272e54ce29b1add7d4783151c67314cfba4a67351499252ac0931c2f1fa925177d516d0f7dd6f1502b34831252a950b67c8943801fe91d", 0x6f}, {&(0x7f0000000300)="f5716789244ea8f219c5a63affe29d1b39d8d0ea5996d8fb5565c8bbb38aec3ea046534aacdf8937528fbd2cce30f6d7be5403f8a7dcc7d5dc0a7fb86e7ee549ecbdf040358213327625e62af468d6eedcd1104ca97bc0d3e427147c6adb97f900cb6be9979f0fa9f79308c9dc64b74b6c4c84d8e9f091e0ac07249eee732eea1727a3cfc7fe9685c3447957cb90043a72066235245b3e46f2df08aa516deaeb7c39589c46803fb8eeda96ce0fd02e3b", 0xb0}, {&(0x7f0000000100)="d2d64ab9511242039dbf950538c1fccf7dc8eae96f8c46234976b89a1403278a09e84bba84c3f3792de8c8ef462da872ba9e0f015b8e9ae25edbd1bb33bc13c7", 0x40}], 0x5, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0xb, 0x0, 0xe284fb5, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x5, 0x3, 0xff, r3}}, @init={0x18, 0x84, 0x0, {0x3a5, 0xfff, 0x6, 0x8000}}, @init={0x18, 0x84, 0x0, {0x873a, 0x4, 0x6, 0xfff}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x6, 0x5ba3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffaa, 0x8, 0x3, 0x81, 0x7, 0x3d, 0x81, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x2, 0x6, 0x3f, r3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x128, 0x20004000}, {&(0x7f0000000640)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="eb07f45b94828e84f7cfad13ef1e5447b32725bc1303c669910ad0896fdf0c86c065eda30d60bff8d10368e97fc178e0984826aa5d028847", 0x38}, {&(0x7f00000006c0)="25c62e514854488be6df66400e1411c64fa27f2629d287d7ad2fed7c7d29c2096d97b537f6bf9b95da84413cf66050a5175334e1f6a4694c9013e427dd1e2df1fcfc51438092418f03994cd6aefee608c6292da3e85394a59430ac17022f1e283f7870366635229d", 0x68}], 0x2, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x4, 0x0, 0x9ae0000, 0x3f, 0x3, 0x1f, 0x3, r3}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x208, 0x2b, 0x7, r9}}, @init={0x18, 0x84, 0x0, {0xfa, 0x72b1, 0x0, 0x1540}}], 0x80, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="2128d7d6c3f47e9eb56fc9ae74f772803a911287cdb3b898e162fa5e2ba7cedb4ba9115d9e774184c3d6fccf5368169a3ee7cec63167f584c9420c88134c2bab7d21f197fd91711b9f8a8067bf41e17a33bb5be60fbfc1d1881645be4f1b15f49e947bacaf53ba75e21184f33dea85d71f36f29465590d86b1f60861472b9a19da84f4b976d9da55ecebbc", 0x8b}, {&(0x7f0000001980)="e961eb5e8be87678559d19094f10091eb7a1f3e647fc4b0a3f9137928451d795311d43a31f9b8fd57422ae5fc2be84a5ee09c3a8d5ab4b5b9b9f3e00705d3d5a090542d253a0c4eb", 0x48}], 0x3, 0xfffffffffffffffd, 0x0, 0x20040000}, {&(0x7f0000001a40)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001a80)="7de7d80ba15dc2d9f46426ccf75fe7480aad46273305ac0d9442df42ecd28ccabb54a599c569533da9969574f6c91493345cf1093343efaec51df866a1a1aa00990a853982ec93d6d478fc5d7475a51b65fa0ded09ec17d77893ce55fe623817c97d52d0518032a7f284a79f1f559753180829ace1ceeb71bfdf8c33c2154a3e71dc5928189de96209f2dc427e63055b12808c731f0d767a59c7d4d823da6f7bf9a5ae248f2e7ab11366d325a6383afa6f6c9c11750bb684d82b8f933f6f", 0xbe}, {&(0x7f0000001b40)="54d3b59790a30384cc313ba265e2c96c719f63a6c0463fdaad28332de1993f4f6e9ffaded13a04797b7ee5cc90500f97d8", 0x31}, {&(0x7f0000001b80)="2839980056c7ef735849083e1a052f75964fd4e2465603a96bbeb44b6808e8f8508172b66dee342cbf21e7afe6baa51b19d4d4d4f9dcafd001bed00a348d0c447913b1664e00dee288ccd3823fa6aab3b012d60e5ac8a6be1bb326d66e4b5b316c7ca436005e40804c2e3ccd9326fcac25de08f3c887032a7bee5a3fa15416c4cf1ee817bc321b9692d6d1e52a90f7609967ccd3", 0x94}, {&(0x7f0000001c40)="db90f196e88239f7a05921ac3905c130ab94fd4342e146bdda14923fbd6550e8254e85ed9dea3cabb600491a3c93ce926787b26eb6cb52abd037dd3f9b1deadeae5563a5ceac0183095205861408bf6f25283c01005e0604bcb446f736e30e705fc7fb74c3432715d4b82726ef36c0a22eb6f23b6e23c17309e9c552a24f66d00e2bf93cee85165039b528876766982d98da8901576a0497bd6d7230d1782b73d91ac8e58f85910501b6b913d544561a09d90600a25dd452", 0xb8}], 0x4, &(0x7f0000001d40)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x203, 0xfffffffe, 0xa5, 0x1, 0xff, 0xfff, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x0, 0xfffffffa, 0x81, 0xffff3835, 0x1f, 0x46a3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x401}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x8203, 0x6, 0x4, 0x3f, 0x6, 0x3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x400}}], 0xe0, 0x1}], 0x4, 0x40) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:36 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:36 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1140.346474][ T9433] hsr_slave_0: left promiscuous mode [ 1140.356598][ T9433] hsr_slave_1: left promiscuous mode [ 1140.369067][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.376609][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.387127][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.394642][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.406012][ T9433] bridge_slave_1: left allmulticast mode [ 1140.411733][ T9433] bridge_slave_1: left promiscuous mode [ 1140.417505][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.454874][ T9433] bridge_slave_0: left allmulticast mode [ 1140.460592][ T9433] bridge_slave_0: left promiscuous mode [ 1140.466319][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.483927][ T9433] veth1_macvtap: left promiscuous mode [ 1140.489559][ T9433] veth0_macvtap: left promiscuous mode [ 1140.495116][ T9433] veth1_vlan: left promiscuous mode [ 1140.500434][ T9433] veth0_vlan: left promiscuous mode [ 1140.738950][ T9433] team0 (unregistering): Port device team_slave_1 removed [ 1140.749974][ T9433] team0 (unregistering): Port device team_slave_0 removed [ 1140.763772][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.778884][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.818354][ T9433] bond0 (unregistering): Released all slaves [ 1141.529473][ T9433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.557732][ T9433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.597407][ T9433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.651644][ T9433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.734425][T18411] chnl_net:caif_netlink_parms(): no params data found [ 1141.772548][T18411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.779765][T18411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.787659][T18411] bridge_slave_0: entered allmulticast mode [ 1141.794196][T18411] bridge_slave_0: entered promiscuous mode [ 1141.815276][T18411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.822357][T18411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.829909][T18411] bridge_slave_1: entered allmulticast mode [ 1141.836590][T18411] bridge_slave_1: entered promiscuous mode [ 1141.860443][T18411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.871240][T18411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.891934][T18411] team0: Port device team_slave_0 added [ 1141.903732][T18411] team0: Port device team_slave_1 added [ 1141.920303][T18411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.927311][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.953233][T18411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.965953][T18411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.973002][T18411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.999019][T18411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.033999][T18411] hsr_slave_0: entered promiscuous mode [ 1142.040247][T18411] hsr_slave_1: entered promiscuous mode [ 1142.370575][T18411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1142.382133][T18411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1142.393743][ T9433] hsr_slave_0: left promiscuous mode [ 1142.399650][ T9433] hsr_slave_1: left promiscuous mode [ 1142.405506][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.412943][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.421221][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.428744][ T9433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.436608][ T9433] bridge_slave_1: left allmulticast mode [ 1142.442374][ T9433] bridge_slave_1: left promiscuous mode [ 1142.448097][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.455817][ T9433] bridge_slave_0: left allmulticast mode [ 1142.461558][ T9433] bridge_slave_0: left promiscuous mode [ 1142.467306][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.478618][ T9433] bridge0: left promiscuous mode [ 1142.483909][ T9433] veth1_macvtap: left promiscuous mode [ 1142.489419][ T9433] veth0_macvtap: left promiscuous mode [ 1142.495085][ T9433] veth1_vlan: left promiscuous mode [ 1142.500304][ T9433] veth0_vlan: left promiscuous mode [ 1142.645777][ T9433] team0 (unregistering): Port device macvlan2 removed [ 1142.694068][ T9433] team0 (unregistering): Port device team_slave_1 removed [ 1142.707909][ T9433] team0 (unregistering): Port device team_slave_0 removed [ 1142.718496][ T9433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1142.732440][ T9433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1142.769235][ T9433] bond0 (unregistering): Released all slaves [ 1142.836946][T18411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1142.847426][T18411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1142.895896][T18411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.911395][T18411] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.922417][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.929608][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.949854][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.956991][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.975332][T18411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1142.985807][T18411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1143.050302][T18411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1143.130890][T18411] veth0_vlan: entered promiscuous mode [ 1143.145270][T18411] veth1_vlan: entered promiscuous mode [ 1143.165101][T18411] veth0_macvtap: entered promiscuous mode [ 1143.173062][T18411] veth1_macvtap: entered promiscuous mode [ 1143.188466][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.199053][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.208911][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.219416][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.229289][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.239745][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.249606][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.260068][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.269996][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.280479][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.290331][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.300801][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.312816][T18411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.324621][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.335133][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.345065][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.355608][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.365466][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.375952][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.385865][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.396375][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.406273][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.416846][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.426714][T18411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1143.437265][T18411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.451811][T18411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.462699][T18411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.471631][T18411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.480479][T18411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 12:48:39 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1143.489297][T18411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:48:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x9d9, @local, 0xffffce30}}, 0x45, 0x6, 0x5, 0x6, 0x6}, &(0x7f0000000200)=0x98) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000780)={r7, 0x4}, &(0x7f00000007c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001e40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3ff, @remote, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="cd571cce71737cacc1488d108ba42a86f6e7f0669ab234ebd17f2cb01816b93feb9e11739fc08c390ce434799cb6c3e3a31cc7c3ce62559058f54cf4d56b76395d1372a667c07062e64dcc441480e9a378644c85", 0x54}, {&(0x7f0000000080)="b826879d4759e53660d0dbcbb2ebbceb40f1e5d9c15cf7afbc2bbd8b936bde0f81d006f57b758680a27dfbab372be05d6856bdee13b36d9977b7b52c89c60c49", 0x40}, {&(0x7f0000000280)="b877e1e5d6b4cd9b2fce176fbe098401408f33b31958e17af25a1f199c2d62107238e26d79415e1d513166832387e056eeb8c3b48ca0f65b272e54ce29b1add7d4783151c67314cfba4a67351499252ac0931c2f1fa925177d516d0f7dd6f1502b34831252a950b67c8943801fe91d", 0x6f}, {&(0x7f0000000300)="f5716789244ea8f219c5a63affe29d1b39d8d0ea5996d8fb5565c8bbb38aec3ea046534aacdf8937528fbd2cce30f6d7be5403f8a7dcc7d5dc0a7fb86e7ee549ecbdf040358213327625e62af468d6eedcd1104ca97bc0d3e427147c6adb97f900cb6be9979f0fa9f79308c9dc64b74b6c4c84d8e9f091e0ac07249eee732eea1727a3cfc7fe9685c3447957cb90043a72066235245b3e46f2df08aa516deaeb7c39589c46803fb8eeda96ce0fd02e3b", 0xb0}, {&(0x7f0000000100)="d2d64ab9511242039dbf950538c1fccf7dc8eae96f8c46234976b89a1403278a09e84bba84c3f3792de8c8ef462da872ba9e0f015b8e9ae25edbd1bb33bc13c7", 0x40}], 0x5, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0xb, 0x0, 0xe284fb5, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x5, 0x3, 0xff, r3}}, @init={0x18, 0x84, 0x0, {0x3a5, 0xfff, 0x6, 0x8000}}, @init={0x18, 0x84, 0x0, {0x873a, 0x4, 0x6, 0xfff}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x6, 0x5ba3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffaa, 0x8, 0x3, 0x81, 0x7, 0x3d, 0x81, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x2, 0x6, 0x3f, r3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x128, 0x20004000}, {&(0x7f0000000640)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="eb07f45b94828e84f7cfad13ef1e5447b32725bc1303c669910ad0896fdf0c86c065eda30d60bff8d10368e97fc178e0984826aa5d028847", 0x38}, {&(0x7f00000006c0)="25c62e514854488be6df66400e1411c64fa27f2629d287d7ad2fed7c7d29c2096d97b537f6bf9b95da84413cf66050a5175334e1f6a4694c9013e427dd1e2df1fcfc51438092418f03994cd6aefee608c6292da3e85394a59430ac17022f1e283f7870366635229d", 0x68}], 0x2, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x4, 0x0, 0x9ae0000, 0x3f, 0x3, 0x1f, 0x3, r3}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x208, 0x2b, 0x7, r9}}, @init={0x18, 0x84, 0x0, {0xfa, 0x72b1, 0x0, 0x1540}}], 0x80, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="2128d7d6c3f47e9eb56fc9ae74f772803a911287cdb3b898e162fa5e2ba7cedb4ba9115d9e774184c3d6fccf5368169a3ee7cec63167f584c9420c88134c2bab7d21f197fd91711b9f8a8067bf41e17a33bb5be60fbfc1d1881645be4f1b15f49e947bacaf53ba75e21184f33dea85d71f36f29465590d86b1f60861472b9a19da84f4b976d9da55ecebbc", 0x8b}, {&(0x7f0000001980)="e961eb5e8be87678559d19094f10091eb7a1f3e647fc4b0a3f9137928451d795311d43a31f9b8fd57422ae5fc2be84a5ee09c3a8d5ab4b5b9b9f3e00705d3d5a090542d253a0c4eb", 0x48}], 0x3, 0xfffffffffffffffd, 0x0, 0x20040000}, {&(0x7f0000001a40)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001a80)="7de7d80ba15dc2d9f46426ccf75fe7480aad46273305ac0d9442df42ecd28ccabb54a599c569533da9969574f6c91493345cf1093343efaec51df866a1a1aa00990a853982ec93d6d478fc5d7475a51b65fa0ded09ec17d77893ce55fe623817c97d52d0518032a7f284a79f1f559753180829ace1ceeb71bfdf8c33c2154a3e71dc5928189de96209f2dc427e63055b12808c731f0d767a59c7d4d823da6f7bf9a5ae248f2e7ab11366d325a6383afa6f6c9c11750bb684d82b8f933f6f", 0xbe}, {&(0x7f0000001b40)="54d3b59790a30384cc313ba265e2c96c719f63a6c0463fdaad28332de1993f4f6e9ffaded13a04797b7ee5cc90500f97d8", 0x31}, {&(0x7f0000001b80)="2839980056c7ef735849083e1a052f75964fd4e2465603a96bbeb44b6808e8f8508172b66dee342cbf21e7afe6baa51b19d4d4d4f9dcafd001bed00a348d0c447913b1664e00dee288ccd3823fa6aab3b012d60e5ac8a6be1bb326d66e4b5b316c7ca436005e40804c2e3ccd9326fcac25de08f3c887032a7bee5a3fa15416c4cf1ee817bc321b9692d6d1e52a90f7609967ccd3", 0x94}, {&(0x7f0000001c40)="db90f196e88239f7a05921ac3905c130ab94fd4342e146bdda14923fbd6550e8254e85ed9dea3cabb600491a3c93ce926787b26eb6cb52abd037dd3f9b1deadeae5563a5ceac0183095205861408bf6f25283c01005e0604bcb446f736e30e705fc7fb74c3432715d4b82726ef36c0a22eb6f23b6e23c17309e9c552a24f66d00e2bf93cee85165039b528876766982d98da8901576a0497bd6d7230d1782b73d91ac8e58f85910501b6b913d544561a09d90600a25dd452", 0xb8}], 0x4, &(0x7f0000001d40)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x203, 0xfffffffe, 0xa5, 0x1, 0xff, 0xfff, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x0, 0xfffffffa, 0x81, 0xffff3835, 0x1f, 0x46a3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x401}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x8203, 0x6, 0x4, 0x3f, 0x6, 0x3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x400}}], 0xe0, 0x1}], 0x4, 0x40) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:39 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:39 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x9d9, @local, 0xffffce30}}, 0x45, 0x6, 0x5, 0x6, 0x6}, &(0x7f0000000200)=0x98) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000780)={r7, 0x4}, &(0x7f00000007c0)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001e40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3ff, @remote, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="cd571cce71737cacc1488d108ba42a86f6e7f0669ab234ebd17f2cb01816b93feb9e11739fc08c390ce434799cb6c3e3a31cc7c3ce62559058f54cf4d56b76395d1372a667c07062e64dcc441480e9a378644c85", 0x54}, {&(0x7f0000000080)="b826879d4759e53660d0dbcbb2ebbceb40f1e5d9c15cf7afbc2bbd8b936bde0f81d006f57b758680a27dfbab372be05d6856bdee13b36d9977b7b52c89c60c49", 0x40}, {&(0x7f0000000280)="b877e1e5d6b4cd9b2fce176fbe098401408f33b31958e17af25a1f199c2d62107238e26d79415e1d513166832387e056eeb8c3b48ca0f65b272e54ce29b1add7d4783151c67314cfba4a67351499252ac0931c2f1fa925177d516d0f7dd6f1502b34831252a950b67c8943801fe91d", 0x6f}, {&(0x7f0000000300)="f5716789244ea8f219c5a63affe29d1b39d8d0ea5996d8fb5565c8bbb38aec3ea046534aacdf8937528fbd2cce30f6d7be5403f8a7dcc7d5dc0a7fb86e7ee549ecbdf040358213327625e62af468d6eedcd1104ca97bc0d3e427147c6adb97f900cb6be9979f0fa9f79308c9dc64b74b6c4c84d8e9f091e0ac07249eee732eea1727a3cfc7fe9685c3447957cb90043a72066235245b3e46f2df08aa516deaeb7c39589c46803fb8eeda96ce0fd02e3b", 0xb0}, {&(0x7f0000000100)="d2d64ab9511242039dbf950538c1fccf7dc8eae96f8c46234976b89a1403278a09e84bba84c3f3792de8c8ef462da872ba9e0f015b8e9ae25edbd1bb33bc13c7", 0x40}], 0x5, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0xb, 0x0, 0xe284fb5, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x5, 0x3, 0xff, r3}}, @init={0x18, 0x84, 0x0, {0x3a5, 0xfff, 0x6, 0x8000}}, @init={0x18, 0x84, 0x0, {0x873a, 0x4, 0x6, 0xfff}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x6, 0x5ba3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffaa, 0x8, 0x3, 0x81, 0x7, 0x3d, 0x81, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x2, 0x6, 0x3f, r3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x128, 0x20004000}, {&(0x7f0000000640)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="eb07f45b94828e84f7cfad13ef1e5447b32725bc1303c669910ad0896fdf0c86c065eda30d60bff8d10368e97fc178e0984826aa5d028847", 0x38}, {&(0x7f00000006c0)="25c62e514854488be6df66400e1411c64fa27f2629d287d7ad2fed7c7d29c2096d97b537f6bf9b95da84413cf66050a5175334e1f6a4694c9013e427dd1e2df1fcfc51438092418f03994cd6aefee608c6292da3e85394a59430ac17022f1e283f7870366635229d", 0x68}], 0x2, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x4, 0x0, 0x9ae0000, 0x3f, 0x3, 0x1f, 0x3, r3}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x208, 0x2b, 0x7, r9}}, @init={0x18, 0x84, 0x0, {0xfa, 0x72b1, 0x0, 0x1540}}], 0x80, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000008c0)="af8b139b495bb26f339e286d141658dd583b4330d861636b470835c99ddbfca3b8de09406267c660e0cf097a41f1e23a6c3ef023c1857bb484ea6347d6352bec7239c2baf71c092b8ea79f6a347d1366260726520a0485b31557ca2a19cf283e983fe28bde459de589798883ba6c6bc422d931869e5d6fd6da26a0e2dec2d61dbc591aa4fde045a7c3c901e6aef65d6486c6fac389c222df5cde0f167049e128cbc0c6415500ebe705971ced175731e381f23efb81165705ed377d8877959c3fa96dd3d066c89dc7147c8117ad12fea98adbdcda2d173eac0b290f93e2d49246e15ddcaacd4e0b01a2cedbc3c307e0fd1284f8eba78d7dd0bed0675f61f6f2357c46c687f4fa89538af1970edc08a75cdee4c12b6f05e0710bdaeb9087656c90c95f309fc45af0e86217b649b9bb2f4357df03c654652d30f2eba092ea20fe69fad12c93302144748587524cc798ad0c84bb5f6c17f9a4502afc0fc53062ce5bbb6f930c32704594c7261d19cc99f552111f1790bbccc11b0e4b82f51b70a36283bd6e0b0be09965372acbb73513a4ccc125a6abb8e20723c5f1bbfde20039def7c855fe5dd599d1dd42e6d5409eecc97b5f655a710218ed1724bf5b65888d9819a390e97da650b67847ffd604fa4109ad8a98de1db8ff5dbdc28b64a9190044642161a77ae7b34bebe4da5770d0f2ee601c9ae418a172cf46e280a852203ccfdaa2aa452de52cd4b77bf01dec15fd5793cce97a152876d6c8218398ce5d06b43455e1180df83f6ecd81e1bf505d894a297c6c2994fabb20bee712f0e747b7db68b5e528f439eb2a79f651511692c5200a3ba05908337ed21bcd0c5c34e5b15d989857a9c7c969d8ef526923db893f2797ff9f6b6e95dc8c9dfdf0bbf5c83dae301a5f79f7812da1ea18c6c4e7fdab10a173e02f9087941d509a72a2ec61ff170684e09dc7c10d96ca655bef7af66660e61d1b5f03e288af28a86d00a568dc84095eeb449f0ee8a1669fa77ac8d14caf714a2a2f47ed7c2adc1829de99db17fe62c72f96be635fc327bea8395a067e870a5fe5eb6a9dc60f29fafb4ba051f9bdaf275ef0e40389776762cf97ff8404bdc2199d2b5b84ea190b340368b38855a7c5669d4f43b2ef8a52493930aacc06918f102f0e2f4ba54a97dc14c393e2a46ba8062739789ffb5eee99abd6f8c744ca5f60a18db57209aafbe155b34709c84266d1c39554928708c3b2dce964dc428f4159c3c7aea73b74b3dae2f18948190986c79e64c55f7e3fa35347a976250c948d34e1b3df24b21f8c8aabb1e5e567a6e1ce071051d5fc19a5a2e73a3a9a6d83d266f0f7976c123892da2a8c51495122cf792a4dd0487750d546c139999bbbeea320eea6116129f7ede995c3ea6c33cf6de055350fe053b455a8cf5ef13ea8d9240872e778c58625b4e2bc8b3a94e5754f605d42c0036fa4520fd03be98d1a751c1581cff2fdf0a09b27bd341f8d1c1d6153031bd2ab3b62610b0b0862f59102315d44bb084310ac4cdeade24aab116bb3f1b8aaf5e397912f7133849485d1058843ea3fdbea6f41406f42fdf735971f6c09a5ce73e246c125ebff41c845615b0f4f4bd8bdca684f2a474aaa466b9076e52272d1bfee1508f69499334f12934385f2f1325e817f3c27b6442ef02e01744a735cd5edcb4f2c16dedcc244aa0571e182270f44cfa717e7b2ff1c1fecf8061c2a0fb8c00044018bfbfe05159171e9216ee498e3acd5144ec601b702d649ec09039ae6283e02140fb4ae7cc1967cd4434e0fe6bca4fea34fc74bbcc0f056ae5d04a63aa9865c518a10d13781a1f4cb926bbf612549b2974cbf0f75a4c61123d3085921deda9e574043a286066b3c8e678b824a084fd6187a8ae9a5e379f3f4c961f4021f6806376bf51807e9c8321bca98dc2248bcf2c08c2abcd4d58e43812ce633cf426461d6a410064282fbf259390a3501535dfc52f52953b2ca1eec26c2ad9f8f8bac55bb986378f5764cfd20871431a21c6539ace40a582d16f37d3c49ad2c69d15ae06ed6d28c3cf635f960d5eb011248f7754a0d6b9124cb0ded6b43a5177ca1ccd86bc9c39b63f8617c395fe0f1be5ffb74f7db6eed874e2f9af7b1bfd3aaf762eb7868956f78dd0f6bd620eab77a0ada5e8f9fba659362283c5ea34a5f60bbb8bea446360186562e7429144dfb3da6bbbeee2cb59c2381d3c3c344bcb890aa9c9988de0ef9a9115fb4b544c2ae6b8308d18c41d5068df2393baa6ebdc1922b5b032bc14ae9dbe38b5317fc3c486dc8a68ebb192880529bce3e817c28da9c25b76145d05c66a661f0036096aeb625cd3305fdfd614526cf9f1854ac3c2508ad8ec05d5d0131b5a75b201e840668a7d29b59a19a4546c2a087b8b01140bf2685b3f6681e188fedb2e8f8057f34ec0853419c21dd19d083718d55656a7bb974f58fb89a350cad5a692c69fcbb8e7dd4470a1b02b3136de1cf89d8615cd2b1b1ac75046b8c75a13c99e27320eaa2f1312c779e122facc45fa7de83b54a7cc0a4455a06746d7b7caa3d689a1de0ca5aa33063d0a556455221724f3491532405bc3eebbc49ea2abbb2b5f2bce43229559c3c7fb1e84edfc6fc7f5a4bbdb8dfa8d7a9861ce140ef52c7236e0e7ef87da37e3729fe52f30c06a9cc3a3ab01ba377f2f324f719cbeb5f01f38f99d1ed3c89ffe6d84fad04e0d20a6c7214d768f0d094ff6b8b45409fe74b920c2d80df2f872d5784a73be847a6152f9b4fea807809880fd9d3c596b24d2f8bd2a38248ee6208e378748293dbec657bf66925ebb2042f6db5174031e45b527e64e78e70a07d0cd2f1e1aec389bf777856522ba95a1e09819cc6b4662b08e42ecca960768d74ce16e522e875e4a2b82f161ebcce170bc38c0ce575e5bbe9bb95a03f59a04b8e089bbaa414dfff9f47b72bd3ddc2f747fb7008cf9968f2a94b82ee88947144e265b8b3e398b7d7b209e250e96ea305d34dfe28f8197dbd58a30bea316ba76f59b3b10715bb9ba682b5ef5fccb1c957de5f37f5cd4589f5935dd840634ffe17e11eadb21224ce670fe0d5b652de8ea5cc349c7f602dbcfe89e36a20285899175b539dd1f8cc1b462cda85cdb69b3da1c1b2895ab06885d1238aa182b24c27c9e6d12e9d94eded1705e8fdc95420aa238b88bf44bd44dff9824d557f56ffd3a2d7d16372b215a2760a2bf297b894cb95a82a9b934f3faff53f67d39975d6311202f0a5db3d60faaceea86ce77cbba035b4fa810c4e410005d255a1281c9df1bb1f5f04282dc38eb53f5a49ea06aad45abf83985455da218d59097420278f6c40cc8e068c0b82add6d478d45b50e56622f58edbbc1e700e59134beb5571d410953700c59d3b27c6421dff828ea07be868149f0db87b83361851c01d897dac7c23fb0ec3079a248adb1606ac0cd2b67304d31f0a6afcfc4e891ac5d2929b8507e34209b34e67af0d83fa093db5dee03742ee05d9b9b239bc6e0e4f48934caf19e11ff8db88ada3758c7befc4db33cdf09ebbd9f626b75fd94c18f878969a415c342271600ef2c224b104eec06956bef0a436d73deeb8f3b58ac19c371f1798c352c3ffaf43ce3787560a6f022283f54f3a9a12c978a0d41347db797b1069c5a9033d9872f58fe21ced6a4d4b0b4d074ff5ea8c151c695fa7e908bdbf3079764a5267917579021863e004d25fc64bd1ea8a494e2acc4071aeb5bb03457ebbc673dbf00b74fda59454b112436209123feb1c58c40cab1320e3affdb3a0c1e841c67771af59b1cc5b83d66008ebf16640a4c41f6b1792a00317342799f535a143fa556a8cd3ed03b4d40092fc15bc003e8bdb314132ac67e56d662705f46f21865090f59f0cef754ddf3e23feaf14451606f84057eea9cd379909ea5330272a32e5d1bc698c094a85c7e82deeafcb7428e72868bff1c13cafc0ae956e0fe9c2f0d54bf7d4a835bad43ae264476aeeba553984044c5a5fab5409aae1acf2b46faabe350cc9b05e658deb1830d843cf3014e8348bfddc303a6edb9e3bc0cca10b21aa26c74effc8320bd5b114fa5577c4440cf37c0324c5b9b20ea347d76bd59d7de4ec7aef29682d3b1d9c5e28eac2395cfc27d67218c23ea6992606b46b7ea703fa0b7c5ded3a6ea1d62209469ea66bbc9c85fa0903ae8bede8dddfd4291380d280715225f722144dd9ebadfbf4451b0866f0e44549f25d120ee74c7e51869110d4c2dbf6de6dd42d278b65a99494ea09ee642f03578872ab6630ff40882cc1c23a0207035e88ce5712af0f976002de9d36b8f1c6d48806990ee1adff804a507c0c29321c0d59704a32bbb7d224edc9f932c350d18d5a6e77424832acdab69dd436597de0d4080321e08499a587258260497a0f02f067bd3fd90411a86fde118d480ba5ec0ccff35f20e08dfc2a2360fbc5e0fe043cb8bbe796974e4c196c108796cff32c46f3fd4008181249faefcbedb77ffe4467ca3c4082f916da385387e25f3abf4868a8a45b93047452bfb986f6f9e598927a5699168bdee0c976171db60e0317708206c7efcdedaf3f9b75e56a5dcabf7cf23894c20395eef279b00c8ee357fc5842ee86b2c3202baf8864c57d2d2d87e8a1f18eb8dd243e066a7cd6b0805f1489b524e4f681c639eb31ef6c65865a6d1e96ff8ce58c394804cc0146d9f3a145c4b4d83cda99a0dec3bc8089db573d6b64c9753edeb059c1ab4245731a8a28635dc002a84eb56547e1c120cda4cc76b06b8aa13f9c2acbd8c9cdb257673106e39b0c3aec842707f2c173e306f8b6b1ca96ad487eb40db54e9ce5ec133546bdb5a63af78cf6cafadeb83ad4c1490c9b1b4e8bf24706eaeac404fe6a9a8a22c448aea2cd572859b3d159aa69686f17eb379c79a31680facec541f4cbdb301dc033985aac626fc8a0d835403b5b29a98b073c353cb8d69315c41b1438f2c956d8b9e9e51f73b25f62bdd9b4b30c08b5b9ca151b809420d9c9d5962e2f67bf88aa8b7422109364dae66adcadd53972367b6918384111ccd3619b62ffb2c2edd7d87f6541ab4d65d039353d4ae70aacc9d7e68eb612ea4ac2e61f30494d915d9e333449d29ea36669160255402c4f627eba2bbbe633ae0f7fb5a6cf0d82e207a6d37a0ef458f9524b396239cbac508e2022cdb82412d3fa66d507720bc35f1322e8ced8ef1e92b16fc588728aaee646f9978f4201a86ece3ffca7b96fd8a9f8a28a7bf0568e13288b848f4c2a80cae40432c73815600c312c6a5b4038bbf6b17abdd7436b6c02376087cbef6454c6a1111bc56f501694f90716edf2a251c2f2f89db84d30327cc1eea55fbf0ae026aa48551c21b3215ff6ab753cf62c3c966c42750232bdbfdb28244e1c9550b52561a5213c05cbbc261e43bbb0e1f4ca8b48754eeceb1e0030dfba82a036d7e41d1fb89655729ed56d51fabf2cafed5675ee04c62f287c3dc4ad6bed95a7940fcbbe8b251bd63b6156808aa81c6dd216ddd0c29244e0dfca2a30d5b8a0d7be7ae8686114f2100e803e858c943e2e3b1285432f65e7819061ed6d9b4499c3f2959fb7508d4c984e2efc430a3070cab8fec9706e5df45045aaf6243386de68d93c7d756f53f60692962a3ef3634d5dff81e8fbeae8ced37301e434381f2bce243eb4ac624553858cea2010ecaf24b0dc788a0d5fc7c2ff67dc0c5ef3e6cf27c6649acf8d14eb433f783967abb3aa5d29a56a486e9103bfee0b4ab9aa7dcfe65f95abad587a127bd5d440d6f7ea8f10602be64322d8b996b12d2beebf1bf1f11c4ff335", 0x1000}, {&(0x7f00000018c0)="2128d7d6c3f47e9eb56fc9ae74f772803a911287cdb3b898e162fa5e2ba7cedb4ba9115d9e774184c3d6fccf5368169a3ee7cec63167f584c9420c88134c2bab7d21f197fd91711b9f8a8067bf41e17a33bb5be60fbfc1d1881645be4f1b15f49e947bacaf53ba75e21184f33dea85d71f36f29465590d86b1f60861472b9a19da84f4b976d9da55ecebbc", 0x8b}, {&(0x7f0000001980)="e961eb5e8be87678559d19094f10091eb7a1f3e647fc4b0a3f9137928451d795311d43a31f9b8fd57422ae5fc2be84a5ee09c3a8d5ab4b5b9b9f3e00705d3d5a090542d253a0c4eb", 0x48}], 0x3, 0xfffffffffffffffd, 0x0, 0x20040000}, {&(0x7f0000001a40)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001a80)="7de7d80ba15dc2d9f46426ccf75fe7480aad46273305ac0d9442df42ecd28ccabb54a599c569533da9969574f6c91493345cf1093343efaec51df866a1a1aa00990a853982ec93d6d478fc5d7475a51b65fa0ded09ec17d77893ce55fe623817c97d52d0518032a7f284a79f1f559753180829ace1ceeb71bfdf8c33c2154a3e71dc5928189de96209f2dc427e63055b12808c731f0d767a59c7d4d823da6f7bf9a5ae248f2e7ab11366d325a6383afa6f6c9c11750bb684d82b8f933f6f", 0xbe}, {&(0x7f0000001b40)="54d3b59790a30384cc313ba265e2c96c719f63a6c0463fdaad28332de1993f4f6e9ffaded13a04797b7ee5cc90500f97d8", 0x31}, {&(0x7f0000001b80)="2839980056c7ef735849083e1a052f75964fd4e2465603a96bbeb44b6808e8f8508172b66dee342cbf21e7afe6baa51b19d4d4d4f9dcafd001bed00a348d0c447913b1664e00dee288ccd3823fa6aab3b012d60e5ac8a6be1bb326d66e4b5b316c7ca436005e40804c2e3ccd9326fcac25de08f3c887032a7bee5a3fa15416c4cf1ee817bc321b9692d6d1e52a90f7609967ccd3", 0x94}, {&(0x7f0000001c40)="db90f196e88239f7a05921ac3905c130ab94fd4342e146bdda14923fbd6550e8254e85ed9dea3cabb600491a3c93ce926787b26eb6cb52abd037dd3f9b1deadeae5563a5ceac0183095205861408bf6f25283c01005e0604bcb446f736e30e705fc7fb74c3432715d4b82726ef36c0a22eb6f23b6e23c17309e9c552a24f66d00e2bf93cee85165039b528876766982d98da8901576a0497bd6d7230d1782b73d91ac8e58f85910501b6b913d544561a09d90600a25dd452", 0xb8}], 0x4, &(0x7f0000001d40)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x203, 0xfffffffe, 0xa5, 0x1, 0xff, 0xfff, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x0, 0xfffffffa, 0x81, 0xffff3835, 0x1f, 0x46a3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x401}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x8203, 0x6, 0x4, 0x3f, 0x6, 0x3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x400}}], 0xe0, 0x1}], 0x4, 0x40) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x9d9, @local, 0xffffce30}}, 0x45, 0x6, 0x5, 0x6, 0x6}, &(0x7f0000000200)=0x98) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000780)={r7, 0x4}, &(0x7f00000007c0)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000001e40)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3ff, @remote, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="cd571cce71737cacc1488d108ba42a86f6e7f0669ab234ebd17f2cb01816b93feb9e11739fc08c390ce434799cb6c3e3a31cc7c3ce62559058f54cf4d56b76395d1372a667c07062e64dcc441480e9a378644c85", 0x54}, {&(0x7f0000000080)="b826879d4759e53660d0dbcbb2ebbceb40f1e5d9c15cf7afbc2bbd8b936bde0f81d006f57b758680a27dfbab372be05d6856bdee13b36d9977b7b52c89c60c49", 0x40}, {&(0x7f0000000280)="b877e1e5d6b4cd9b2fce176fbe098401408f33b31958e17af25a1f199c2d62107238e26d79415e1d513166832387e056eeb8c3b48ca0f65b272e54ce29b1add7d4783151c67314cfba4a67351499252ac0931c2f1fa925177d516d0f7dd6f1502b34831252a950b67c8943801fe91d", 0x6f}, {&(0x7f0000000300)="f5716789244ea8f219c5a63affe29d1b39d8d0ea5996d8fb5565c8bbb38aec3ea046534aacdf8937528fbd2cce30f6d7be5403f8a7dcc7d5dc0a7fb86e7ee549ecbdf040358213327625e62af468d6eedcd1104ca97bc0d3e427147c6adb97f900cb6be9979f0fa9f79308c9dc64b74b6c4c84d8e9f091e0ac07249eee732eea1727a3cfc7fe9685c3447957cb90043a72066235245b3e46f2df08aa516deaeb7c39589c46803fb8eeda96ce0fd02e3b", 0xb0}, {&(0x7f0000000100)="d2d64ab9511242039dbf950538c1fccf7dc8eae96f8c46234976b89a1403278a09e84bba84c3f3792de8c8ef462da872ba9e0f015b8e9ae25edbd1bb33bc13c7", 0x40}], 0x5, &(0x7f0000000500)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0xb, 0x0, 0xe284fb5, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x5, 0x3, 0xff, r3}}, @init={0x18, 0x84, 0x0, {0x3a5, 0xfff, 0x6, 0x8000}}, @init={0x18, 0x84, 0x0, {0x873a, 0x4, 0x6, 0xfff}}, @init={0x18, 0x84, 0x0, {0x5, 0x0, 0x6, 0x5ba3}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffaa, 0x8, 0x3, 0x81, 0x7, 0x3d, 0x81, r7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0x1f, 0x2, 0x6, 0x3f, r3}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0x128, 0x20004000}, {&(0x7f0000000640)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000680)="eb07f45b94828e84f7cfad13ef1e5447b32725bc1303c669910ad0896fdf0c86c065eda30d60bff8d10368e97fc178e0984826aa5d028847", 0x38}, {&(0x7f00000006c0)="25c62e514854488be6df66400e1411c64fa27f2629d287d7ad2fed7c7d29c2096d97b537f6bf9b95da84413cf66050a5175334e1f6a4694c9013e427dd1e2df1fcfc51438092418f03994cd6aefee608c6292da3e85394a59430ac17022f1e283f7870366635229d", 0x68}], 0x2, &(0x7f0000000800)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x4, 0x0, 0x9ae0000, 0x3f, 0x3, 0x1f, 0x3, r3}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x208, 0x2b, 0x7, r9}}, @init={0x18, 0x84, 0x0, {0xfa, 0x72b1, 0x0, 0x1540}}], 0x80, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001a00)=[{&(0x7f00000008c0)="af8b139b495bb26f339e286d141658dd583b4330d861636b470835c99ddbfca3b8de09406267c660e0cf097a41f1e23a6c3ef023c1857bb484ea6347d6352bec7239c2baf71c092b8ea79f6a347d1366260726520a0485b31557ca2a19cf283e983fe28bde459de589798883ba6c6bc422d931869e5d6fd6da26a0e2dec2d61dbc591aa4fde045a7c3c901e6aef65d6486c6fac389c222df5cde0f167049e128cbc0c6415500ebe705971ced175731e381f23efb81165705ed377d8877959c3fa96dd3d066c89dc7147c8117ad12fea98adbdcda2d173eac0b290f93e2d49246e15ddcaacd4e0b01a2cedbc3c307e0fd1284f8eba78d7dd0bed0675f61f6f2357c46c687f4fa89538af1970edc08a75cdee4c12b6f05e0710bdaeb9087656c90c95f309fc45af0e86217b649b9bb2f4357df03c654652d30f2eba092ea20fe69fad12c93302144748587524cc798ad0c84bb5f6c17f9a4502afc0fc53062ce5bbb6f930c32704594c7261d19cc99f552111f1790bbccc11b0e4b82f51b70a36283bd6e0b0be09965372acbb73513a4ccc125a6abb8e20723c5f1bbfde20039def7c855fe5dd599d1dd42e6d5409eecc97b5f655a710218ed1724bf5b65888d9819a390e97da650b67847ffd604fa4109ad8a98de1db8ff5dbdc28b64a9190044642161a77ae7b34bebe4da5770d0f2ee601c9ae418a172cf46e280a852203ccfdaa2aa452de52cd4b77bf01dec15fd5793cce97a152876d6c8218398ce5d06b43455e1180df83f6ecd81e1bf505d894a297c6c2994fabb20bee712f0e747b7db68b5e528f439eb2a79f651511692c5200a3ba05908337ed21bcd0c5c34e5b15d989857a9c7c969d8ef526923db893f2797ff9f6b6e95dc8c9dfdf0bbf5c83dae301a5f79f7812da1ea18c6c4e7fdab10a173e02f9087941d509a72a2ec61ff170684e09dc7c10d96ca655bef7af66660e61d1b5f03e288af28a86d00a568dc84095eeb449f0ee8a1669fa77ac8d14caf714a2a2f47ed7c2adc1829de99db17fe62c72f96be635fc327bea8395a067e870a5fe5eb6a9dc60f29fafb4ba051f9bdaf275ef0e40389776762cf97ff8404bdc2199d2b5b84ea190b340368b38855a7c5669d4f43b2ef8a52493930aacc06918f102f0e2f4ba54a97dc14c393e2a46ba8062739789ffb5eee99abd6f8c744ca5f60a18db57209aafbe155b34709c84266d1c39554928708c3b2dce964dc428f4159c3c7aea73b74b3dae2f18948190986c79e64c55f7e3fa35347a976250c948d34e1b3df24b21f8c8aabb1e5e567a6e1ce071051d5fc19a5a2e73a3a9a6d83d266f0f7976c123892da2a8c51495122cf792a4dd0487750d546c139999bbbeea320eea6116129f7ede995c3ea6c33cf6de055350fe053b455a8cf5ef13ea8d9240872e778c58625b4e2bc8b3a94e5754f605d42c0036fa4520fd03be98d1a751c1581cff2fdf0a09b27bd341f8d1c1d6153031bd2ab3b62610b0b0862f59102315d44bb084310ac4cdeade24aab116bb3f1b8aaf5e397912f7133849485d1058843ea3fdbea6f41406f42fdf735971f6c09a5ce73e246c125ebff41c845615b0f4f4bd8bdca684f2a474aaa466b9076e52272d1bfee1508f69499334f12934385f2f1325e817f3c27b6442ef02e01744a735cd5edcb4f2c16dedcc244aa0571e182270f44cfa717e7b2ff1c1fecf8061c2a0fb8c00044018bfbfe05159171e9216ee498e3acd5144ec601b702d649ec09039ae6283e02140fb4ae7cc1967cd4434e0fe6bca4fea34fc74bbcc0f056ae5d04a63aa9865c518a10d13781a1f4cb926bbf612549b2974cbf0f75a4c61123d3085921deda9e574043a286066b3c8e678b824a084fd6187a8ae9a5e379f3f4c961f4021f6806376bf51807e9c8321bca98dc2248bcf2c08c2abcd4d58e43812ce633cf426461d6a410064282fbf259390a3501535dfc52f52953b2ca1eec26c2ad9f8f8bac55bb986378f5764cfd20871431a21c6539ace40a582d16f37d3c49ad2c69d15ae06ed6d28c3cf635f960d5eb011248f7754a0d6b9124cb0ded6b43a5177ca1ccd86bc9c39b63f8617c395fe0f1be5ffb74f7db6eed874e2f9af7b1bfd3aaf762eb7868956f78dd0f6bd620eab77a0ada5e8f9fba659362283c5ea34a5f60bbb8bea446360186562e7429144dfb3da6bbbeee2cb59c2381d3c3c344bcb890aa9c9988de0ef9a9115fb4b544c2ae6b8308d18c41d5068df2393baa6ebdc1922b5b032bc14ae9dbe38b5317fc3c486dc8a68ebb192880529bce3e817c28da9c25b76145d05c66a661f0036096aeb625cd3305fdfd614526cf9f1854ac3c2508ad8ec05d5d0131b5a75b201e840668a7d29b59a19a4546c2a087b8b01140bf2685b3f6681e188fedb2e8f8057f34ec0853419c21dd19d083718d55656a7bb974f58fb89a350cad5a692c69fcbb8e7dd4470a1b02b3136de1cf89d8615cd2b1b1ac75046b8c75a13c99e27320eaa2f1312c779e122facc45fa7de83b54a7cc0a4455a06746d7b7caa3d689a1de0ca5aa33063d0a556455221724f3491532405bc3eebbc49ea2abbb2b5f2bce43229559c3c7fb1e84edfc6fc7f5a4bbdb8dfa8d7a9861ce140ef52c7236e0e7ef87da37e3729fe52f30c06a9cc3a3ab01ba377f2f324f719cbeb5f01f38f99d1ed3c89ffe6d84fad04e0d20a6c7214d768f0d094ff6b8b45409fe74b920c2d80df2f872d5784a73be847a6152f9b4fea807809880fd9d3c596b24d2f8bd2a38248ee6208e378748293dbec657bf66925ebb2042f6db5174031e45b527e64e78e70a07d0cd2f1e1aec389bf777856522ba95a1e09819cc6b4662b08e42ecca960768d74ce16e522e875e4a2b82f161ebcce170bc38c0ce575e5bbe9bb95a03f59a04b8e089bbaa414dfff9f47b72bd3ddc2f747fb7008cf9968f2a94b82ee88947144e265b8b3e398b7d7b209e250e96ea305d34dfe28f8197dbd58a30bea316ba76f59b3b10715bb9ba682b5ef5fccb1c957de5f37f5cd4589f5935dd840634ffe17e11eadb21224ce670fe0d5b652de8ea5cc349c7f602dbcfe89e36a20285899175b539dd1f8cc1b462cda85cdb69b3da1c1b2895ab06885d1238aa182b24c27c9e6d12e9d94eded1705e8fdc95420aa238b88bf44bd44dff9824d557f56ffd3a2d7d16372b215a2760a2bf297b894cb95a82a9b934f3faff53f67d39975d6311202f0a5db3d60faaceea86ce77cbba035b4fa810c4e410005d255a1281c9df1bb1f5f04282dc38eb53f5a49ea06aad45abf83985455da218d59097420278f6c40cc8e068c0b82add6d478d45b50e56622f58edbbc1e700e59134beb5571d410953700c59d3b27c6421dff828ea07be868149f0db87b83361851c01d897dac7c23fb0ec3079a248adb1606ac0cd2b67304d31f0a6afcfc4e891ac5d2929b8507e34209b34e67af0d83fa093db5dee03742ee05d9b9b239bc6e0e4f48934caf19e11ff8db88ada3758c7befc4db33cdf09ebbd9f626b75fd94c18f878969a415c342271600ef2c224b104eec06956bef0a436d73deeb8f3b58ac19c371f1798c352c3ffaf43ce3787560a6f022283f54f3a9a12c978a0d41347db797b1069c5a9033d9872f58fe21ced6a4d4b0b4d074ff5ea8c151c695fa7e908bdbf3079764a5267917579021863e004d25fc64bd1ea8a494e2acc4071aeb5bb03457ebbc673dbf00b74fda59454b112436209123feb1c58c40cab1320e3affdb3a0c1e841c67771af59b1cc5b83d66008ebf16640a4c41f6b1792a00317342799f535a143fa556a8cd3ed03b4d40092fc15bc003e8bdb314132ac67e56d662705f46f21865090f59f0cef754ddf3e23feaf14451606f84057eea9cd379909ea5330272a32e5d1bc698c094a85c7e82deeafcb7428e72868bff1c13cafc0ae956e0fe9c2f0d54bf7d4a835bad43ae264476aeeba553984044c5a5fab5409aae1acf2b46faabe350cc9b05e658deb1830d843cf3014e8348bfddc303a6edb9e3bc0cca10b21aa26c74effc8320bd5b114fa5577c4440cf37c0324c5b9b20ea347d76bd59d7de4ec7aef29682d3b1d9c5e28eac2395cfc27d67218c23ea6992606b46b7ea703fa0b7c5ded3a6ea1d62209469ea66bbc9c85fa0903ae8bede8dddfd4291380d280715225f722144dd9ebadfbf4451b0866f0e44549f25d120ee74c7e51869110d4c2dbf6de6dd42d278b65a99494ea09ee642f03578872ab6630ff40882cc1c23a0207035e88ce5712af0f976002de9d36b8f1c6d48806990ee1adff804a507c0c29321c0d59704a32bbb7d224edc9f932c350d18d5a6e77424832acdab69dd436597de0d4080321e08499a587258260497a0f02f067bd3fd90411a86fde118d480ba5ec0ccff35f20e08dfc2a2360fbc5e0fe043cb8bbe796974e4c196c108796cff32c46f3fd4008181249faefcbedb77ffe4467ca3c4082f916da385387e25f3abf4868a8a45b93047452bfb986f6f9e598927a5699168bdee0c976171db60e0317708206c7efcdedaf3f9b75e56a5dcabf7cf23894c20395eef279b00c8ee357fc5842ee86b2c3202baf8864c57d2d2d87e8a1f18eb8dd243e066a7cd6b0805f1489b524e4f681c639eb31ef6c65865a6d1e96ff8ce58c394804cc0146d9f3a145c4b4d83cda99a0dec3bc8089db573d6b64c9753edeb059c1ab4245731a8a28635dc002a84eb56547e1c120cda4cc76b06b8aa13f9c2acbd8c9cdb257673106e39b0c3aec842707f2c173e306f8b6b1ca96ad487eb40db54e9ce5ec133546bdb5a63af78cf6cafadeb83ad4c1490c9b1b4e8bf24706eaeac404fe6a9a8a22c448aea2cd572859b3d159aa69686f17eb379c79a31680facec541f4cbdb301dc033985aac626fc8a0d835403b5b29a98b073c353cb8d69315c41b1438f2c956d8b9e9e51f73b25f62bdd9b4b30c08b5b9ca151b809420d9c9d5962e2f67bf88aa8b7422109364dae66adcadd53972367b6918384111ccd3619b62ffb2c2edd7d87f6541ab4d65d039353d4ae70aacc9d7e68eb612ea4ac2e61f30494d915d9e333449d29ea36669160255402c4f627eba2bbbe633ae0f7fb5a6cf0d82e207a6d37a0ef458f9524b396239cbac508e2022cdb82412d3fa66d507720bc35f1322e8ced8ef1e92b16fc588728aaee646f9978f4201a86ece3ffca7b96fd8a9f8a28a7bf0568e13288b848f4c2a80cae40432c73815600c312c6a5b4038bbf6b17abdd7436b6c02376087cbef6454c6a1111bc56f501694f90716edf2a251c2f2f89db84d30327cc1eea55fbf0ae026aa48551c21b3215ff6ab753cf62c3c966c42750232bdbfdb28244e1c9550b52561a5213c05cbbc261e43bbb0e1f4ca8b48754eeceb1e0030dfba82a036d7e41d1fb89655729ed56d51fabf2cafed5675ee04c62f287c3dc4ad6bed95a7940fcbbe8b251bd63b6156808aa81c6dd216ddd0c29244e0dfca2a30d5b8a0d7be7ae8686114f2100e803e858c943e2e3b1285432f65e7819061ed6d9b4499c3f2959fb7508d4c984e2efc430a3070cab8fec9706e5df45045aaf6243386de68d93c7d756f53f60692962a3ef3634d5dff81e8fbeae8ced37301e434381f2bce243eb4ac624553858cea2010ecaf24b0dc788a0d5fc7c2ff67dc0c5ef3e6cf27c6649acf8d14eb433f783967abb3aa5d29a56a486e9103bfee0b4ab9aa7dcfe65f95abad587a127bd5d440d6f7ea8f10602be64322d8b996b12d2beebf1bf1f11c4ff335", 0x1000}, {&(0x7f00000018c0)="2128d7d6c3f47e9eb56fc9ae74f772803a911287cdb3b898e162fa5e2ba7cedb4ba9115d9e774184c3d6fccf5368169a3ee7cec63167f584c9420c88134c2bab7d21f197fd91711b9f8a8067bf41e17a33bb5be60fbfc1d1881645be4f1b15f49e947bacaf53ba75e21184f33dea85d71f36f29465590d86b1f60861472b9a19da84f4b976d9da55ecebbc", 0x8b}, {&(0x7f0000001980)="e961eb5e8be87678559d19094f10091eb7a1f3e647fc4b0a3f9137928451d795311d43a31f9b8fd57422ae5fc2be84a5ee09c3a8d5ab4b5b9b9f3e00705d3d5a090542d253a0c4eb", 0x48}], 0x3, 0xfffffffffffffffd, 0x0, 0x20040000}, {&(0x7f0000001a40)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001a80)="7de7d80ba15dc2d9f46426ccf75fe7480aad46273305ac0d9442df42ecd28ccabb54a599c569533da9969574f6c91493345cf1093343efaec51df866a1a1aa00990a853982ec93d6d478fc5d7475a51b65fa0ded09ec17d77893ce55fe623817c97d52d0518032a7f284a79f1f559753180829ace1ceeb71bfdf8c33c2154a3e71dc5928189de96209f2dc427e63055b12808c731f0d767a59c7d4d823da6f7bf9a5ae248f2e7ab11366d325a6383afa6f6c9c11750bb684d82b8f933f6f", 0xbe}, {&(0x7f0000001b40)="54d3b59790a30384cc313ba265e2c96c719f63a6c0463fdaad28332de1993f4f6e9ffaded13a04797b7ee5cc90500f97d8", 0x31}, {&(0x7f0000001b80)="2839980056c7ef735849083e1a052f75964fd4e2465603a96bbeb44b6808e8f8508172b66dee342cbf21e7afe6baa51b19d4d4d4f9dcafd001bed00a348d0c447913b1664e00dee288ccd3823fa6aab3b012d60e5ac8a6be1bb326d66e4b5b316c7ca436005e40804c2e3ccd9326fcac25de08f3c887032a7bee5a3fa15416c4cf1ee817bc321b9692d6d1e52a90f7609967ccd3", 0x94}, {&(0x7f0000001c40)="db90f196e88239f7a05921ac3905c130ab94fd4342e146bdda14923fbd6550e8254e85ed9dea3cabb600491a3c93ce926787b26eb6cb52abd037dd3f9b1deadeae5563a5ceac0183095205861408bf6f25283c01005e0604bcb446f736e30e705fc7fb74c3432715d4b82726ef36c0a22eb6f23b6e23c17309e9c552a24f66d00e2bf93cee85165039b528876766982d98da8901576a0497bd6d7230d1782b73d91ac8e58f85910501b6b913d544561a09d90600a25dd452", 0xb8}], 0x4, &(0x7f0000001d40)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x203, 0xfffffffe, 0xa5, 0x1, 0xff, 0xfff, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x9, 0x0, 0xfffffffa, 0x81, 0xffff3835, 0x1f, 0x46a3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x401}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x5, 0x8203, 0x6, 0x4, 0x3f, 0x6, 0x3, r4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x400}}], 0xe0, 0x1}], 0x4, 0x40) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@gettaction={0xd4, 0x32, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x228098d0}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40014}, 0x4020800) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1143.828451][T18483] loop1: detected capacity change from 0 to 512 [ 1143.863722][T18483] EXT4-fs (loop1): inodes count not valid: 32 vs 41 12:48:40 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1145.549079][T18489] chnl_net:caif_netlink_parms(): no params data found [ 1145.590646][T18489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.597784][T18489] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.607540][T18489] bridge_slave_0: entered allmulticast mode [ 1145.614317][T18489] bridge_slave_0: entered promiscuous mode [ 1145.621669][T18489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.628903][T18489] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.636102][T18489] bridge_slave_1: entered allmulticast mode [ 1145.642642][T18489] bridge_slave_1: entered promiscuous mode [ 1145.662183][T18489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.673215][T18489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1145.697410][T18489] team0: Port device team_slave_0 added [ 1145.706058][T18489] team0: Port device team_slave_1 added [ 1145.725544][T18489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1145.732513][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.758468][T18489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1145.771986][T18489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1145.778980][T18489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1145.804944][T18489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.838924][T18489] hsr_slave_0: entered promiscuous mode [ 1145.845246][T18489] hsr_slave_1: entered promiscuous mode [ 1145.851179][T18489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.860803][T18489] Cannot create hsr debugfs directory [ 1146.054822][T18489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1146.066453][T18489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1146.075955][T18489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1146.085242][T18489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1146.104130][T18489] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.111331][T18489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.118679][T18489] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.125750][T18489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.170274][T18489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.184948][T16211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.193437][T16211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.210482][T18489] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.225678][T16211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.232768][T16211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.256710][T16211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.263844][T16211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.281977][T18489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1146.292405][T18489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.358383][T18489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.503631][T18489] veth0_vlan: entered promiscuous mode [ 1146.514910][T18489] veth1_vlan: entered promiscuous mode [ 1146.538500][T18489] veth0_macvtap: entered promiscuous mode [ 1146.549082][T18489] veth1_macvtap: entered promiscuous mode [ 1146.562600][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.573141][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.582987][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.593591][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.603495][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.613985][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.623811][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.634326][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.644234][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.654696][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.664541][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.675024][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.684869][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1146.695346][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.707887][T18489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.716299][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.726816][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.736669][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.747291][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.757148][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.767675][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.777596][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.788127][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.798003][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.808460][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.818464][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.828932][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.838780][T18489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1146.849226][T18489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1146.861178][T18489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.875380][T18489] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.884302][T18489] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.893029][T18489] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.901814][T18489] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:48:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:43 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:43 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:43 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@gettaction={0xd4, 0x32, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x228098d0}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40014}, 0x4020800) (async) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@gettaction={0xd4, 0x32, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x228098d0}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40014}, 0x4020800) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@gettaction={0xd4, 0x32, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x228098d0}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40014}, 0x4020800) (async) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaIJFxMTPeixlkqQBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQw0X0YNbM7gzddnfLbttlqfv5JNO+N/N23nvz5nXfzJtpAAOrnP1IInZFxK8RMVqPLk9QjjgeETeuX579+/rl2SSq1Vf/TGrp/rp+eTZLVs1l4Z35PsfTiPSjJI61yHf+4qUzM5XK3IU8Prlw9p3J+YuXnjl9dubU3Km5c9NHjx45PPX8c9PPbkg9R7Ky7n///IF9J9749OXZarz5w1dZ+Xfl24t6LBlbd57lKC8/lg0eX/fe7ywjDeFkqI8FoSuliMiaa7jW/0ejFEuNNxovfdjXwgE9lX1nb21aWyoCi1XgfyyJfpcA6I/iiz67/i2W2zj86Ltrx+oXQFm9b+RLfctQpNmvbfVro5Ee5V+OiNcX//ksW6LlfQgAgI31TTb+ebrV+C+NexvS7c7nhsYi4q6I2BMRd0fE3oi4J6KW9r6IuL/L/Msr4s3jn5+3r6liHcrGfy/kc1vLx39pkWSslMdGavUfTt46XZk7lB+T8RjemsWnVsnj2xd/+aTdtsbxX7Zk+RdjwbwcfwytuEF3cmZhZj11bnTtg4j9Q63qn9ycCUgiYl9E7F/D/rNjdvrJLw9k4d07m7fvvWX9V7EB80zVLyKeqLf/YqyofyGp59RufnJyW1TmDk0WZ0WzH3+6+kq7/G/d/r2Vtf+Oluf/zfqPJY3ztfPd53H1t4/bXtOs9fzfkrxWC2/J1703s7BwYSpiS7LYvH566bNFvEif1X/8YOv+vyfi38/zzz0QEdlJ/GBEPBQRD+dlfyQiHo2Ig6vU//vjj729+hHqb/uf7Kr9uw+Uznz3dbv8O2v/I7XQeL6mk79/nRZwPccOAAAANou09gx8kk7cDKfpxET9Gf69sSOtnJ9feKoc7547WX9WfiyG0+JO12jD/dCp/N5wEZ9eET9cu29crVar22vxidnzlV7NqQOd2dmm/2d+L/W7dEDPdTWP1u6NNmBT8r4mDC79HwaX/g+DS/+HwdWq/1+JuNGHogC3me9/GFz6Pwwu/R8Gl/4PA6n5lfji362s5U3/pcCeE+v6+AAFSj3ac9aGvSx8pH0/dGsPpHdGMeqBrRHRaeIrPW3TlecPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5vdfAAAA//8tQulz") 12:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f000095dffc)=0x8) r1 = socket(0xa, 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:44 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f000095dffc)=0x8) (async) r1 = socket(0xa, 0x1, 0x0) close(r1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1148.428445][T18591] loop1: detected capacity change from 0 to 512 [ 1148.452089][T18591] EXT4-fs (loop1): inodes count not valid: 32 vs 8192 12:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:44 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f000095dffc)=0x8) r1 = socket(0xa, 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES64=r0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) close(r1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) r5 = accept$inet(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000002c0)={r4, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000180)=0x8, 0x4) sendmmsg$inet_sctp(r3, &(0x7f0000000200), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r7 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000800), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r4, 0x101, 0x20, 0x0, 0x7fffffff}, &(0x7f0000000200)=0x18) 12:48:45 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) 12:48:45 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1149.268540][T18635] loop1: detected capacity change from 0 to 512 12:48:45 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1149.466500][T18635] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1149.499607][T18635] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1149.518474][T18635] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1149.558636][T18635] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 12:48:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) [ 1149.588872][T18635] EXT4-fs (loop1): 1 truncate cleaned up [ 1149.594609][T18635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1149.667993][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0tYzu+OdmZ2denZnNwEMrHL2TxKxJyJ+iYjRenRlgnL94+aNK7N/3bgym0S1+sofSQxFxJ83rsxmyaq5LLw73+d4GpF+mMSJFvnOX7p8dqZSmbuYxycXzr09OX/p8lNnzs2cnjs9d376+PFjR6eefWb66U2p50hW1oPvXTh04OTrn7w0W403vv8yq+eefHtRj2VjG86zHOWVx7LBoxve+51lpCGcDPWxIHSlFFHrx8O1/j8apVhuvNF48YO+Fg7oqew3e3vT2lIRWKwC/2FJ9LsEQH8UP/TZ9W+x3MbhR99dP1G/AMrqfTNf6luGIs0+dtSvjUZ6lH85Il5b/PvTbImW9yEAADbX19n458lW47807m5ItzefGxqLiP9FxL6I+H9E7I+IuyJqae+JiHu7zL+8Kt48/vlp57oq1qFs/PdcPre1cvyXFknGSnlspFb/4eTNM5W5I/kxGY/h7Vl8ao08vnnh54/bbWsc/2VLln8xFszL8fvQqht0p2YWZjZS50bX3484ONSq/snSTEASEQci4uA69p8dszOPf3EoC+/d3bx9/y3rv4ZNmGeqfh7xWL39F2NV/QtJPad285OTO6Iyd2SyOCua/fDjtZfb5X/r9u+trP13tTz/l+o/ljTO1853n8e1Xz9qe02z3vN/W/JqLbwtX/fuzMLCxamIbcli8/rp5e8W8SJ9Vv/xw637/76Ifz7Lv3dfRGQn8f0R8UBEPJiX/aGIeDgiDq9R/++ef+SttY9Qf9v/VFft332gdPbbr9rl31n7H6uFxvM1nfz/12kBN3LsAAAAYKtIa8/AJ+nEUjhNJybqz/Dvj11p5cL8whPleOf8qfqz8mMxnBZ3ukYb7odO5feGi/j0qvjR2n3jarVa3VmLT8xeqPRqTh3ozO42/T/zW6nfpQN6rqt5tHZvtAFbkvc1YXDp/zC49H8YXPo/DK5W/f9qxM0+FAW4zfz+w+DS/2Fw6f8wuPR/GEjNr8QXf25lPW/6Lwf2ndzQ1wcoUOrRnrM27GXhI+37oVt/IL0zilEPbI+IThNf7Wmbrj5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtr5/AwAA//+mmulU") 12:48:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) 12:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0tYzu+OdmZ2denZnNwEMrHL2TxKxJyJ+iYjRenRlgnL94+aNK7N/3bgym0S1+sofSQxHxJ83rsxmyaq5LLw73+d4GpF+mMSJFvnOX7p8dqZSmbuYxycXzr09OX/p8lNnzs2cnjs9d376+PFjR6eefWb66U2p50hW1oPvXTh04OTrn7w0W403vv8yq+eefHtRj2VjG86zHOWVx7LBoxve+51lpCGcDPWxIHSlFBFZcw3X+v9olGK58UbjxQ/6Wjigp7Lf7O1Na0tFYLEK/Icl0e8SAP1R/NBn17/FchuHH313/UT9Aiir9818qW8ZijT72FG/NhrpUf7liHht8e9PsyVa3ocAANhcX2fjnydbjf/SuLsh3d58bmgsIv4XEfsi4v8RsT8i7oqopb0nIu7tMv/yqnjz+OenneuqWIey8d9z+dzWyvFfWiQZK+WxkVr9h5M3z1TmjuTHZDyGt2fxqTXy+OaFnz9ut61x/JctWf7FWDAvx+9Dq27QnZpZmNlInRtdfz/i4FCr+idLMwFJRByIiIPr2H92zM48/sWhLLx3d/P2/bes/xo2YZ6p+nnEY/X2X4xV9S8k9ZzazU9O7ojK3JHJ4qxo9sOP115ul/+t27+3svbf1fL8X6r/WNI4XzvffR7Xfv2o7TXNes//bcmrtfC2fN27MwsLF6citiWLzeunl79bxIv0Wf3HD7fu//si/vks/959EZGdxPdHxAMR8WBe9oci4uGIOLxG/b97/pG31j5C/W3/U121f/eB0tlvv2qXf2ftf6wWGs/XdPL/X6cF3MixAwAAgK0irT0Dn6QTS+E0nZioP8O/P3allQvzC0+U453zp+rPyo/FcFrc6RptuB86ld8bLuLTq+JHa/eNq9VqdWctPjF7odKrOXWgM7vb9P/Mb6V+lw7oua7m0dq90QZsSd7XhMGl/8Pg0v9hcOn/MLha9f+rETf7UBTgNvP7D4NL/4fBpf/D4NL/YSA1vxJf/LmV9bzpvxzYd3JDXx+gQKlHe87asJeFj7Tvh279gfTOKEY9sD0iOk18tadtuvr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Pr+DQAA//+imulV") 12:48:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) r5 = accept$inet(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000002c0)={r4, 0x1000, "3eba1773d883e16fd0e1c3c4d9144b170d7691b0be4fd4a8fb46b3decf669c0fe3668b2ad885986b114e6d2afbe475a6cafe9729cb1228160f7149773b3ab2cf7130eb137701aaa338c423786ec7498332ad16ff18f49e26af4579c15e3c3ee72026cf99e449065fca088a024b3dc1c9594e48a62f31c117f81f310d15048b90773c5aadac6536b6f4dabf0252dbf2e71ffe31269e0dbc8f3fb9ecec1eb5da6344028ec33188a29439ef6ec4b5d0c289003e62f6d291b9c1de02edad4a676ddcec71d151c629c25f89f98d58358f7cc9d944f15d4905588cfc49322162bfdd6df6f80e482281f5475e795577e4ede69d1a6ec89c1c091a1887b7b21837b7894b95986bd0b8a66f2c32c96d2472fb5371f9d8d0aee615be476caed854beefd59b5b2d1a4b85312601b0666d36b945fb235fc1a27ca96b1862df26cdf93dac95f34d14d319103f5f4e6d9724bc5736475e376a1cb501a061830a2f47995bf19cd6002811647b8e7d9a0583a009a62875f68d11e5d5194293d71fc4da8acccbfc92894f56207efd1449934f7b123a53ea1b0ecef779231fa8d5a40814e1f925ab60ad50c77bd2d8b22e7c45c9dfcd9e8697432359ace1e8160b3c084bc388a35e99f02e3919fb40edb9cb9b6bfd3f460a280fc4041795c70f242c3f0d951f985ff96d2dbeede7a9a4536f2c369d2d8310c58a5273539c4c8057f1c7c84ad0bc8b7df4db09db956f499ed3515bda71ae79695aacafb4b65f831420e9c36a2597de256c89777d03c6c42a7fe1b843bfd2cd7a7a25dfc305115d1004fc28b0c26ec1904c0c743066a87892bcae13bcde68b12d6672dcc669af21c7ed28c0c540260a86184eddf538e20f3164cdf421aea708aa4d92d8d0b3503678e0b962706f4237585d183cbe5ab1aea4268deed56e4271c79021782132a61423bbddc7b74ced225c4bf9e26e7bcec3e099c88183a942a8de0dc450e07071ff6174f507271b0c86a7be12bd3df5e848e014c60a9601496cb7e839d4684bbd58e6d8fda88002cbd781646a71b07dcb7e03ffeb415f71117f7ef89e545dfba439e40d5c19545307e655c71915a4db3ee1b946608c7d1a92458cbb57d1db6d4e3028a1c1fea641df8a66db2cfd75de78be0c0ead41f8faa260b86a5ee6c1835b53c074b1021a039c40c373896e0245fb58bb8959740c9ea90bdbfe15a8903a81c0ff4a6ec74b7468b447c5d143956dd8dc54905b4d32c09498045fe9fdc40af7297ce03d22b210834363d867dd5e01d951e6df4eef1cb56a65971aff94e52972148dcbf4862c820435bfdc643a896191f581badf991fed944b5ac668aee40fdc51cd10e162dc744519a9061f28cb6eed0c04e515feae4f910313b9a3e8d68089bf68a4ef50d762fedbf6063e5953665f06ec36540fe3d3ede6e5505ce395d025a1230c13cc3b841c722dcebf1a2736add3b529d63be7f2da9f297820c6f68df14a1dc292231421782c36bbf470cd1c5b08fcc30cbe3eec4c079a2ae044923ded9deb4c1c436191599bcee5284cce6a28aec3edaa4e309e1361cb16e6dc0a4fc5524a8351a344c92a2600b707f13dff83209450a64839f9eed10ff47586f9f4f0edfc3d54c672ca9fba048dd767008bce21a95d9880e185ddfebe89b82be3705ee955e307feb28a77fab2a38e30fb8ea105d03cdfb1649434319c31b82ba3388359e3aa7ba5da45f81b64a8a45de7c71f0eb69b040210847cf0663bdfefdb1ba466ecbd47856ef187ea602bf56142882e2de5f593c5bf19d4c56c177f608bfa7a83c2c9fd0c5cd0f64932de33ca5f6393063aeb8d97757e2cfa80f11fa08b99350f48aa31fd57f379815d3c365ebcded5d25ee4cc29255e8d2f146f905cbc8a7441e1f96c8cc109c4cd6c049c91c15ebbf09cd68d7bb47311d7946d39864773a40cbb1f07fea238846829e52b8bb848317e99aa10cfbed70eb6e15889e35f8c30acc1554f4c8a188354ad3bf1eb6472b3fdfcaa7f4cc0152b5724637398eb5bde8f965a60b2847dc5a17147f7bb70dec81a72af57149c5b9653f9c84c1e6a7c4fa14f3f032a25cc487cf76d754d987c15d7ea3ef7ad666fdefc7b4ea66868def09beef3bdb71294c7e0c8cd193ef1b56d8a453aad643bd8571e0460c0db8bb59cbcf9d97bbf47c34f94a1d05108c21cf0fc3da2621df9f11c50109a8d17da3bb561161b4e6a0bbb97d501a01aeb0f79a53af55da9df4ce9f78c3b00240cdf459e3d774e35a38b233a843653c8e3c21c91617736094f60aef0a91ec8e83162e7ffdefdb0a3c900d0e53ea6548761bcf5465936915beef17cd7aee149ab2218aa924e412cce25f037034571d6c956ffba942c6fcd148e39d6201e7f8d808428510f9f4a18ede0dd19b1f93d4caf4203130aa17d40a9905197df91b75824010a3631139ec4539bddc782970a00b98a1eee9ce4f2f5883c23149e57706cf46e42896a11143e046a780629e38952b5a6f3360099f886739f3df092856981f9fcae4f9fc36d4d395feeb2d309c19291bb692dba6df8d88be0547cf4ebc65afbf5414576d3a6b8473c63f10c80f9b4f874dff94a6bfc1b1d5fef88acfd11e090f607b3df91f83ce317d0d3d357b8306267950d7284320a13f4bd60e9a79bb5b353de3d9f532a7542651f56f8228852934895f5ed3aca8a4819472dcb6630c6f412faf1058e04688fb3e26afd34ea17a86701ee7df1330d55f3847e6717b5013285e074fc7626db5ad598fda48c221b1f41e3e442ac76d794a253eef1456677d2f7b5a720c6c1843f4bc8d5000876e3e3dd493bb4cbbeae931172ec7e64ef93e418164e9a5d3941421355a7684c93625758e0f58766bc938ac57fa35d4d46fdeaa002d2c596f45939f81d029204cd603c6adb776a1172c561d6ba8505ccd10db1fb37b9ce0aadfc02b0ac9cf8eb593ba79472561c60129e66adab41ee87cf9f1d6053d095385fb9d330f3b66975cb2a1e81ab743e25cca5a01ef027f1d8b8790bee1c31ca6c5eadc95bb70cf48b78edbd7570ce39dcf58c923b573ba708bd156a6d834b56035518f553d5df03cc074bb1038c9f2cfaecad47db9cd9f638350f2487ad9f2bf43f68b1e117be029d6b7de5f5a172d574ac2f2abb8488a6c3550b4d8128e3c33f5d19a09473392d9899eed88fecfb0157581d7230c79f84e2522205fc87dc8af6f78cd483497631ef3ab8eae3d3ab7a0a2b4ed07bea75c5e7da13e780a9ef94d17eaa7368de319c9b9af63feeb40c7443d69ee98a90fc93495df26247a00d8a08d5c5613e9d3d1c10cd8b97cfead49dc000363926c44bf468584da9e91ddc68319e1709dfb3d52477da84451197536a8dbfd3581021863cd2f6c527cdd14b38ac7205048fd1c331b36a4935751bd79fc244e98e1ed7acf8bae573e3febbe6a2df953dc9f52d63bca0bdb58a4967ceb7531f7377e4dc81dd14ad9741b8b76b312437cfc518af7031af699776b99520235eff535d6e4100659e531ed1c33240c5ffe9ee954a127daa2f15e853e277151d8ecaa533e8c23e9f5e5f8e01d281f28a05bfe7d0549ac5d36ef9fa8a07ea04cdbd034d805802b08ee6f16d3ecb58cf21a1e5862468788e01e802f955ca64eb9c0aa9134cc757d07603136cedf595d4d335c716eab16090040a2d40cfac8255d948b669d7d42a1ba10ca4b1a3ae1e8531d70242498ece2d9788caafa58adfa54224c428dc898211226b75c52448e35de95ee6f9cb7513b38a0a33322f03443b5cab71d4dbbf15d79002c11c456c2ee9e24cbf479a3abacf9852f58c085555d747b47efceb75361beb8b40db16dd19fc07160cf3a46b9b45f6a83fcc18ed2df690fdc9d8edb53fa148e928758592eb5f8c810cc8ae157b358cdd8c109442926b1dbb8c7c2aec85b98667447f56d72ece1973a7bff908c7c50ba6a910928d72adec76b307c36c2e91fe087d1e8237a616f90d26b52e9717054ef964d763df3d2e44cdd01041a8f01f5157f4507a7ead282bf92449a7bf00856910f1ebfcdaf1972c2b523a46b151e473572c333d56880d4bd1d58bec214a5c0bdbc58f957759998f5d25d2be33039414729cb2304f7a7476c1ce3891bbba1fadbc61b5b3d85458a0c0fdd0845b72a7fde8fc967acf10ce433271d21278fc32e75d8d58ec2f41ccaae282f86d5f86af37f09f9e762632bd08e5cc87db9e4a5b93c60f86ecad30838ac6e96503c5f1d818ec6e6799e93866a20302ce68be797054b2325deaa16a8a22d06b9ae785c273ef7151700f4f29344bb3f856715750425a431dcec8bda5e52139e61fa4d589a4dab83eebc949f9a3d12345791f72dc5f4167a0f4d71757ca74f86184246f987da3a117359b9520032e2ebb655a54269b4e663f4832f293cab7f69f57326afd9fe3c89ef3be7dcc7b9cec12238ee17724536c51b63a285b56cb4e1e55e3eed1d842fd48035aee477a3a74e3493a36c2057d176bf17c953b167f1fd41affe88c3122c0294faa49ad278d67d6e781e4eb77b12a29cc42fd24e917f99b48a63d949d3e8c0f31070ab472a3ac25cc873c8c1e3802a0452956cb74e1cd0ea9105eb06dc6098b34ced00b1ae271c0b4db17787ce24b1f9d6ade24951114d7dd8d7d95097315cf78ca198a4cd6e11805d5a1555ac5e4fe5ac5652770e9cab0e3cba8733ccd9b1e33ace1baadfc2d2c8b8a3f1a7f4d1a8556d8f74089a09afc332e5f14244969dd2687c277e34c80c10f999fa4245b30b2ac772e013ebebbaae552df0eac0393e5952061c0ad3e5eb69860fa2f08468dd83080302ab9f250f3d690bd73752dd18bd3ede13e5464f1044cedfaf320d1a6d4ace3981c8b480a8424f22b56145c7167e66f2abd6610a4697cda006df54114ac25299be0d953e0a11d99d2c95ecede5d6623ca0a70baed85886af1999f79031ba4a860a343cfc87fe3008bd0a190d4b4d194a3cb4136b0069f65ca7e5e2928be3f0d2328abdadf4144104dbe7664dfe2996d7bad67c782e7ea568aaf7d67016ebba70be5352f59da85645b518d4b65837580f7222f56b6518b8216040702dd210be1dc644473e69330507c17326cbb811e40115de28da36964f2a8cf68d77cc6c7c7f14d99b4b71ba8955b139495aca0c2fca1634df1b7111c3da22168f02162ae53c647e1e7257d5a6de99e09c18478a27a79d3fbdd38ca13496c1db4ddcdc562eb45abb24dc57528bc857797c2e9dc7041049b4bb90370de7918c7a57a9cba9ad803f5745caffc9be6d8a051bde0076aa2f6177dc6650330fe10f71ccb2095978e7e20d5bed94268773cc9db9cc2077692efdbdeb8b311ba1ac2904db9fcc63166cfb94a610bca0688f1fba01e52776988ba4bb613b1c6c328fcc570a08dab24969265c46163cb8e27ea27ed0a763275c65c7e88e1542561c2f07a8990ecabaccb4c6c03fd645f61ea3383ca108d11f0dbecf647b5349b6e47c9f9fa7e8b59ecfc65a66ff76480f6e187b2427ea7f491e1523e247bccbcf04aeab6d9799407662723114c17a19bddc5b0deef040f550e8f0d73430e13b008998869ec2346db5199ba037496d96cf8725d91661dbaf34c256228f8330ed40fc861a9d3c87595539e43425a0664e9c3be87c5cb386032dafb98b133d312475c9516e1e6de9611879bccaf0aceb93c93ed718624ee56f38379ccd384c7c3262f636b5c9a82716eeb0eaf7b24e93dd803e671d6edbf21e2355c2436c9efca88a506f6e63db5ca78a00569949e96b5ce5f95f25a934efef4ceeea10220b2e6eb367fc18aa1f1261b"}, &(0x7f00000001c0)=0x1008) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000180)=0x8, 0x4) (async, rerun: 64) sendmmsg$inet_sctp(r3, &(0x7f0000000200), 0x0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r7 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000800), 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r4, 0x101, 0x20, 0x0, 0x7fffffff}, &(0x7f0000000200)=0x18) 12:48:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x9}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) (async) r5 = accept$inet(r3, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000002c0)={r4, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) (async) setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000180)=0x8, 0x4) sendmmsg$inet_sctp(r3, &(0x7f0000000200), 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r7 = io_uring_setup(0x7ac3, &(0x7f00000001c0)={0x0, 0x0, 0x42}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000800), 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r4, 0x101, 0x20, 0x0, 0x7fffffff}, &(0x7f0000000200)=0x18) 12:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x69, @local}}, 0xcf, 0xe3b}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:47 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1151.239014][T18714] loop1: detected capacity change from 0 to 512 [ 1151.255247][T18714] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1151.265915][T18714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1151.272509][T18714] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 12:48:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x69, @local}}, 0xcf, 0xe3b}, 0x90) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1151.282937][T18714] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 12:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1151.334948][T18714] EXT4-fs (loop1): 1 truncate cleaned up [ 1151.340686][T18714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) (rerun: 32) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x69, @local}}, 0xcf, 0xe3b}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1151.392816][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:47 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1151.491187][T18740] loop1: detected capacity change from 0 to 512 [ 1151.589785][T18740] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1151.620275][T18740] EXT4-fs (loop1): orphan cleanup on readonly fs 12:48:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r5, r4, 0x0, 0xffefffff) [ 1151.640114][T18740] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1151.696140][T18740] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1151.719181][T18740] EXT4-fs (loop1): 1 truncate cleaned up [ 1151.724893][T18740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1151.791536][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:47 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:47 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:47 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1152.044042][T18765] loop1: detected capacity change from 0 to 512 [ 1152.104544][T18765] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1152.132891][T18765] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1152.148070][T18765] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1152.178034][T18765] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1152.230382][T18765] EXT4-fs (loop1): 1 truncate cleaned up [ 1152.236100][T18765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket(0xf, 0x2, 0x81) 12:48:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1152.331480][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1152.395695][T18786] loop1: detected capacity change from 0 to 512 [ 1152.519736][T18786] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1152.533455][T18786] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1152.544394][T18786] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1152.556229][T18786] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1152.580005][T18786] EXT4-fs (loop1): 1 truncate cleaned up [ 1152.585721][T18786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1152.663106][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:48 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:48 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:48 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:48 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1152.878159][T18798] loop1: detected capacity change from 0 to 512 [ 1152.915912][T18798] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:48:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1152.948792][T18798] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1152.967357][T18798] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1153.000898][T18798] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1153.063748][T18798] EXT4-fs (loop1): 1 truncate cleaned up [ 1153.069536][T18798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:49 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket(0xf, 0x2, 0x81) 12:48:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1153.184818][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1153.269169][T18822] loop1: detected capacity change from 0 to 512 [ 1153.309116][T18822] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1153.330551][T18822] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1153.365740][T18822] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 12:48:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1153.379721][T18822] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1153.391847][T18822] EXT4-fs (loop1): 1 truncate cleaned up [ 1153.397552][T18822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1153.428977][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:49 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:49 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:49 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1153.839759][T18842] loop1: detected capacity change from 0 to 512 [ 1153.884757][T18842] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1153.937730][T18842] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1153.951958][T18842] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1153.963050][T18842] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1153.973557][T18842] EXT4-fs (loop1): 1 truncate cleaned up 12:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1153.979389][T18842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1154.001701][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket(0xf, 0x2, 0x81) (async) socket(0xf, 0x2, 0x81) 12:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1154.150036][T18864] loop1: detected capacity change from 0 to 512 [ 1154.209591][T18864] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1154.220274][T18864] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1154.228502][T18864] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1154.243192][T18864] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1154.253843][T18864] EXT4-fs (loop1): 1 truncate cleaned up 12:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1154.259699][T18864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1154.320045][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.412057][T18878] loop1: detected capacity change from 0 to 512 [ 1154.440145][T18878] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1154.473746][T18878] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1154.495164][T18878] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1154.542597][T18878] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1154.579773][T18878] EXT4-fs (loop1): 1 truncate cleaned up [ 1154.585568][T18878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1154.643552][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:50 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:50 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:50 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:50 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1154.814468][T18887] loop1: detected capacity change from 0 to 512 [ 1154.831119][T18887] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1154.847528][T18887] EXT4-fs (loop1): orphan cleanup on readonly fs 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1154.862223][T18887] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1154.880564][T18887] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1154.893752][T18887] EXT4-fs (loop1): 1 truncate cleaned up [ 1154.899484][T18887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1154.928731][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x8000000}, @in6={0xa, 0x4e20, 0x2, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @empty}], 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="c337d9fda90f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x8000000}, @in6={0xa, 0x4e20, 0x2, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @empty}], 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="c337d9fda90f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0x1000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x8000000}, @in6={0xa, 0x4e20, 0x2, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @empty}], 0x58) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="c337d9fda90f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) close(r3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) 12:48:51 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1155.129443][T18909] loop1: detected capacity change from 0 to 512 [ 1155.182850][T18909] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1155.204268][T18909] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1155.210906][T18909] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 12:48:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x5, 0x1000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x4, @loopback, 0x8000000}, @in6={0xa, 0x4e20, 0x2, @local}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @empty}], 0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="c337d9fda90f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r3 = socket(0xa, 0x1, 0x0) close(r3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1155.243456][T18909] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 12:48:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffefffff) [ 1155.306031][T18909] EXT4-fs (loop1): 1 truncate cleaned up [ 1155.311769][T18909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1155.380527][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:51 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:51 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQwwX0YNbM7gzddnfLbttlqfv5JMO+N/N23nvz5rFv5s00gIFVzv5JInZFxG8RMVqPLk9Qrn/cuHZp9u9rl2aTqFZf+yupJbx+7dJslqyay8I7832OpxHpx0kca5Hv/IWLp2cqlbnzeXxy4cy7k/MXLj5z6szMybmTc2enjx49cnjq+eemn92Qeo5ExPX9H5w7sO/4m5+9MluNt378Oqvnrnx7UY8lY+vOsxzl5ceywePr3vudZaQhnAz1sSB0pRQRWXMN1/r/aJRiqfFG4+WP+lo4oKey3+ytTWtLRWCxCvyPJdHvEgD9UfzQZ9e/xXIbhx99d/VY/QIoq/eNfKlvGYo0+9hWvzYa6VH+5Yh4Y/Gfz7MlWt6HAADYWN9m45+nW43/0ri3Id3ufG5oLCLuiog9EXF3ROyNiHsiamnvi4j7u8y/vCLePP75ZfuaKtahbPz3Qj63tXz8lxZJxkp5bKRW/+Hk7VOVuUP5MRmP4a1ZfGqVPL576ddP221rHP9lS5Z/MRbMy/Hn0IobdCdmFmbWU+dGVz+M2D/Uqv7JzZmAJCL2RcT+New/O2annvzqQBbevbN5+95b1n8VGzDPVP0y4ol6+y/GivoXknpO7eYnJ7dFZe7QZHFWNPvp5yuvtsv/1u3fW1n772h5/t+s/1jSOF87330eV37/pO01zVrP/y3J67Xwlnzd+zMLC+enIrYki83rp5e+W8SL9Fn9xw+27v97Iv79Iv/eAxGRncQPRsRDEfFwXvZHIuLRiDi4Sv1/ePGxd1Y/Qv1t/xNdtX/3gdLp779pl39n7X+kFhrP13Ty/1+nBVzPsQMAAIDNIq09A5+kEzfDaToxUX+Gf2/sSCvn5heeKsd7Z0/Un5Ufi+G0uNM12nA/dCq/N1zEp1fED9fuG1er1er2Wnxi9lylV3PqQGd2tun/mT9K/S4d0HNdzaO1e6MN2JS8rwmDS/+HwaX/w+DS/2Fwter/lyNu9KEowG3m9x8Gl/4Pg0v/h8Gl/8NAan4lvvhzK2t5038psOf4ur4+QIFSj/actWEvCx9p3w/d2gPpnVGMemBrRHSa+HJP23Tl+QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALD5/RcAAP//spnpUQ==") [ 1155.614859][T18943] loop1: detected capacity change from 0 to 512 [ 1155.647944][T18943] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1155.658956][T18943] EXT4-fs (loop1): orphan cleanup on readonly fs 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1155.667436][T18943] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1155.677845][T18943] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1155.690206][T18943] EXT4-fs (loop1): 1 truncate cleaned up [ 1155.695967][T18943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1155.735336][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:51 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffefffff) 12:48:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (rerun: 64) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQwwX0YNbM7gzddnfLbttlqfv5JMO+N/N23nvz5rFv5s00gIFVzv5JInZFxG8RMVqPLk9Qrn/cuHZp9u9rl2aTqFZf+yuJXUnE9WuXZrNk1VwW3pnvczyNSD9O4liLfOcvXDw9U6nMnc/jkwtn3p2cv3DxmVNnZk7OnZw7O3306JHDU88/N/3shtRzJCKu7//g3IF9x9/87JXZarz149dZPXfl24t6LBlbd57lKC8/lg0eX/fe7ywjDeFkqI8FoSuliMiaa7jW/0ejFEuNNxovf9TXwgE9lf1mb21aWyoCi1XgfyyJfpcA6I/ihz67/i2W2zj86Lurx+oXQFm9b+RLfctQpNnHtvq10UiP8i9HxBuL/3yeLdHyPgQAwMb6Nhv/PN1q/JfGvQ3pdudzQ2MRcVdE7ImIuyNib0TcE1FLe19E3N9l/uUV8ebxzy/b11SxDmXjvxfyua3l47+0SDJWymMjtfoPJ2+fqswdyo/JeAxvzeJTq+Tx3Uu/ftpuW+P4L1uy/IuxYF6OP4dW3KA7MbMws546N7r6YcT+oVb1T27OBCQRsS8i9q9h/9kxO/XkVwey8O6dzdv33rL+q9iAeabqlxFP1Nt/MVbUv5DUc2o3Pzm5LSpzhyaLs6LZTz9febVd/rdu/97K2n9Hy/P/Zv3Hksb52vnu87jy+ydtr2nWev5vSV6vhbfk696fWVg4PxWxJVlsXj+99N0iXqTP6j9+sHX/3xPx7xf59x6IiOwkfjAiHoqIh/OyPxIRj0bEwVXq/8OLj72z+hHqb/uf6Kr9uw+UTn//Tbv8O2v/I7XQeL6mk///Oi3geo4dAAAAbBZp7Rn4JJ24GU7TiYn6M/x7Y0daOTe/8FQ53jt7ov6s/FgMp8WdrtGG+6FT+b3hIj69In64dt+4Wq1Wt9fiE7PnKr2aUwc6s7NN/8/8Uep36YCe62oerd0bbcCm5H1NGFz6Pwwu/R8Gl/4Pg6tV/78ccaMPRQFuM7//MLj0fxhc+j8MLv0fBlLzK/HFn1tZy5v+S4E9x9f19QEKlHq056wNe1n4SPt+6NYeSO+MYtQDWyOi08SXe9qmK88fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAze+/AAAA//+Cmeld") 12:48:52 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0xffefffff) 12:48:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000180)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010008ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="a6", 0x1}, {&(0x7f0000000000)="aab42c861d150240f97a863f1b6f0a852d33359e38905f0642bcb096cd269c", 0x1f}], 0x2, 0x0, 0x0, 0x9040}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1156.463457][T18987] loop1: detected capacity change from 0 to 512 [ 1156.546302][T18987] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1156.554863][T18987] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1156.567167][T18987] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1156.586587][T18987] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 12:48:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:52 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1156.597568][T18987] EXT4-fs (loop1): 1 truncate cleaned up [ 1156.603245][T18987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1156.677375][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:52 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:52 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1156.798864][T19014] loop1: detected capacity change from 0 to 512 [ 1156.834778][T19014] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1156.847191][T19014] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1156.854599][T19014] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1156.865517][T19014] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1156.888181][T19014] EXT4-fs (loop1): 1 truncate cleaned up 12:48:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1156.893917][T19014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1156.940702][T18411] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:53 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:53 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1157.210115][ T9434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.268309][ T9434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010008ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) socket(0xa, 0x1, 0x0) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="a6", 0x1}, {&(0x7f0000000000)="aab42c861d150240f97a863f1b6f0a852d33359e38905f0642bcb096cd269c", 0x1f}], 0x2, 0x0, 0x0, 0x9040}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1157.350395][ T9434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:53 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) [ 1157.450240][ T9434] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 12:48:53 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:48:53 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:53 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:54 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffefffff) [ 1158.107604][ T9434] hsr_slave_0: left promiscuous mode [ 1158.118869][ T9434] hsr_slave_1: left promiscuous mode [ 1158.162522][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.170119][ T9434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.188988][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.196649][ T9434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1158.208081][ T9434] bridge_slave_1: left allmulticast mode [ 1158.213911][ T9434] bridge_slave_1: left promiscuous mode [ 1158.219670][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.260625][ T9434] bridge_slave_0: left allmulticast mode [ 1158.266422][ T9434] bridge_slave_0: left promiscuous mode [ 1158.272099][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.300136][ T9434] veth1_macvtap: left promiscuous mode [ 1158.305905][ T9434] veth0_macvtap: left promiscuous mode [ 1158.311410][ T9434] veth1_vlan: left promiscuous mode [ 1158.316714][ T9434] veth0_vlan: left promiscuous mode [ 1158.441380][ T9434] team0 (unregistering): Port device team_slave_1 removed [ 1158.453907][ T9434] team0 (unregistering): Port device team_slave_0 removed [ 1158.467375][ T9434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.480419][ T9434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.521373][ T9434] bond0 (unregistering): Released all slaves [ 1159.573042][T19079] chnl_net:caif_netlink_parms(): no params data found [ 1159.610551][T19079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.617749][T19079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.624937][T19079] bridge_slave_0: entered allmulticast mode [ 1159.631516][T19079] bridge_slave_0: entered promiscuous mode [ 1159.638775][T19079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1159.645879][T19079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.653025][T19079] bridge_slave_1: entered allmulticast mode [ 1159.659528][T19079] bridge_slave_1: entered promiscuous mode [ 1159.677537][T19079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.688328][T19079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.708501][T19079] team0: Port device team_slave_0 added [ 1159.715217][T19079] team0: Port device team_slave_1 added [ 1159.732343][T19079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.739340][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.765324][T19079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.777304][T19079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.784287][T19079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.810403][T19079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.838196][T19079] hsr_slave_0: entered promiscuous mode [ 1159.844314][T19079] hsr_slave_1: entered promiscuous mode [ 1160.111570][T19079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1160.122918][T19079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1160.132403][T19079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1160.142787][T19079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1160.161834][T19079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.168931][T19079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.176349][T19079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.183392][T19079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.223275][T19079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1160.237761][T18335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.246840][T18335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.261428][T19079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.273152][T18335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.280254][T18335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.296925][T18335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.304036][T18335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1160.322193][T19079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1160.332664][T19079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1160.398734][T19079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.481348][T19079] veth0_vlan: entered promiscuous mode [ 1160.495550][T19079] veth1_vlan: entered promiscuous mode [ 1160.516904][T19079] veth0_macvtap: entered promiscuous mode [ 1160.525128][T19079] veth1_macvtap: entered promiscuous mode [ 1160.539205][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.549714][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.559626][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.570121][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.580026][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.590566][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.600457][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.610924][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.620780][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.631346][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.641194][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.651639][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.661498][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1160.672157][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.687468][T19079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.699350][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.709861][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.719762][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.730253][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.740184][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.750627][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.760482][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.771018][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.780945][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.791486][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.801366][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.811896][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.821736][T19079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.832208][T19079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.846711][T19079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.859199][T19079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.868036][T19079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.876804][T19079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.885544][T19079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 12:48:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffefffff) 12:48:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010008ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="a6", 0x1}, {&(0x7f0000000000)="aab42c861d150240f97a863f1b6f0a852d33359e38905f0642bcb096cd269c", 0x1f}], 0x2, 0x0, 0x0, 0x9040}], 0x1, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (rerun: 64) 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0xffefffff) 12:48:57 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000180)=0x8) r1 = socket(0xa, 0x1, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x10001, "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", 0x8, 0x5, 0x8, 0x0, 0x3f, 0x5, 0x4, 0x1}}}, 0x128) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5, 0x1e, "2ef1e64a43b73d86ad51c2521314785d6472da7e4dcaa2358a030a967f04"}, 0x26) sendfile(r0, r1, &(0x7f0000000400), 0x2) 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpO+04RSHi0FDAUR8UiatEAPXIpA6gUJCQ5wDGmoSt0WNUGiVUUDQuWI+ATAEYlPwAkuCDiBuMIdIVWolxYOyGjt3caJ7dRO4rrBv5+09szueGdmZyee3fEmgIFVzl6SiF0R8VtEjNajyxOU6283rl2a/fvapdkkqtXX/speS3H92qXZLFk1l4V35vscTyPSj5M41iLf+QsXT89UKnPn8/jkwpl3J+cvXHzm1JmZk3Mn585OHz165PDU889NP7sh9RyJiOv7Pzh3YN/xNz97ZbYab/34dVbPXfn2oh5LxtadZznKy49lg8fXvfc7y0hDOBnqY0HoSikisuYarvX/0SjFUuONxssf9bVwQE9l39lbm9aWisBiFfgfS6LfJQD6o/iiz65/i+U2Dj/67uqx+gVQVu8b+VLfMhRp9ratfm000qP8yxHxxuI/n2dLtLwPAQCwsb7Nxj9Ptxr/pXFvQ7rd+dzQWETcFRF7IuLuiNgbEfdE1NLeFxH3d5l/eUW8efzzy/Y1VaxD2fjvhXxua/n4Ly2SjJXy2Eit/sPJ26cqc4fyYzIew1uz+NQqeXz30q+fttvWOP7Lliz/YiyYl+PPoRU36E7MLMysp86Nrn4YsX+oVf2TmzMBSUTsi4j9a9h/dsxOPfnVgSy8e2fz9r23rP8qNmCeqfplxBP19l+MFfUvJPWc2s1PTm6LytyhyeKsaPbTz1debZf/rdu/t7L239Hy/L9Z/7Gkcb52vvs8rvz+SdtrmrWe/1uS12vhLfm692cWFs5PRWxJFpvXTy99togX6bP6jx9s3f/3RPz7Rf65ByIiO4kfjIiHIuLhvOyPRMSjEXFwlfr/8OJj76x+hPrb/ie6av/uA6XT33/TLv/O2v9ILTSer+nk71+nBVzPsQMAAIDNIq39Bj5JJ26G03Riov4b/r2xI62cm194qhzvnT1R/638WAynxZ2u0Yb7oVP5veEiPr0ifrh237harVa31+ITs+cqvZpTBzqzs03/z/xR6nfpgJ7rah6t3RNtwKbkeU0YXPo/DC79HwaX/g+Dq1X/vxxxow9FAW4z3/8wuPR/GFz6Pwwu/R8GUvMj8cW/W1nLk/5LgT3H1/XxAQqUerTnrA17WfhI+37o1h5I74xi1ANbI6LTxJd72qYrzx8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDN778AAAD//7Ed61E=") 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:57 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1161.878036][T19167] loop1: detected capacity change from 0 to 512 [ 1161.910542][T19167] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:48:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1161.942394][T19167] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1161.970524][T19167] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1162.012109][T19167] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1162.034523][T19167] EXT4-fs (loop1): 1 truncate cleaned up [ 1162.040239][T19167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1162.098709][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:58 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000180)=0x8) r1 = socket(0xa, 0x1, 0x0) close(r1) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async, rerun: 64) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async, rerun: 32) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x10001, "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", 0x8, 0x5, 0x8, 0x0, 0x3f, 0x5, 0x4, 0x1}}}, 0x128) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5, 0x1e, "2ef1e64a43b73d86ad51c2521314785d6472da7e4dcaa2358a030a967f04"}, 0x26) (async) sendfile(r0, r1, &(0x7f0000000400), 0x2) 12:48:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:48:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:58 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000180)=0x8) (async) r1 = socket(0xa, 0x1, 0x0) close(r1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x0, {0x4, 0x10001, "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", 0x8, 0x5, 0x8, 0x0, 0x3f, 0x5, 0x4, 0x1}}}, 0x128) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={0x0, 0x5, 0x1e, "2ef1e64a43b73d86ad51c2521314785d6472da7e4dcaa2358a030a967f04"}, 0x26) (async) sendfile(r0, r1, &(0x7f0000000400), 0x2) 12:48:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M1vFOUfAPDvzLa8l/bHD19A1FU0Nr60tKBy8ILRhIuJiR70WEslSAFDayKESDUGj8a/QD2a+Bd40otRTxqvejcmxHABOZgxsztDl+5u2W1ZlrqfTzLs88w8O8/zzDMP+8w8Mw1gYFXzf5KIHRHxW0SM1qM3J6jWP65duTD795ULs0lk2Wt/JXE9yy5evXJhNk+WFfLw9mKf42lE+nESR1rku3Du/MmZ+fm5s0V8cvHUu5ML584/c+LUzPG543Onpw8fPnRw6vnnpp+9LfUciYirez84s2/P0Tc/e2U2i7d+/Dqv545ie1mPZWPrzrMa1ZuPZYPH1733u8tIQzgZ6mNB6EolIvLmGq71/9GoxHLjjcbLH/W1cEBP5b/Zm5vWVsrAUgb8hyXR7xIA/VH+0OfXv+VyB4cffXf5SP0CKK/3tWKpbxmKNP/YUr82GulR/tWIeGPp+uf5Ei3vQwAA3F7f5uOfp1uN/9K4tyHdzmJuaCwi/hcRuyLi/xGxOyLuiailvS8i7u8y/+qKePP455eta6pYh/Lx3wvF3NbN47+0TDJWKWIjtfoPJ2+fmJ87UByT8RjenMenVsnju5d+/bTdtsbxX77k+ZdjwaIcfw6tuEF3bGZxZj11bnT5w4i9Q63qn9yYCUgiYk9E7F3D/vNjduLJr/bl4Z3bm7fvvmX9V3Eb5pmyLyOeqLf/Uqyofymp59RufnJyS8zPHZgsz4pmP/186dV2+d+6/Xsrb/9tLc//G/UfSxrnaxe6z+PS75+0vaZZ6/m/KXm9Ft5UrHt/ZnHx7FTEpmSpef308nfLeJk+r//4/tb9f1fEP18U33sgIvKT+MGIeCgiHi7K/khEPBoR+1ep/w8vPvbO6keov+1/rKv27z5QOfn9N+3y76z9D9VC48WaTv7/67SA6zl2AAAAsFGktWfgk3TiRjhNJybqz/Dvjm3p/JmFxaeq8d7pY/Vn5cdiOC3vdI023A+dKu4Nl/HpFfGDtfvGWZZlW2vxidkz872aUwc6s71N/8/9Uel36YCe62oerd0bbcCG5H1NGFz6Pwwu/R8Gl/4Pg6tV/78Yca0PRQHuML//MLj0fxhc+j8MLv0fBlLzK/Hln1tZy5v+y4FdR9f19QEKVHq057wNe1n4SPt+6NYeSO+OYtQDmyOi08QXe9qmK88fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAje/fAAAA///ZTuzG") 12:48:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:59 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:59 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1163.221391][T19225] loop1: detected capacity change from 0 to 512 [ 1163.267433][T19225] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1163.293750][T19225] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1163.308602][T19225] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1163.330688][T19225] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1163.381307][T19225] EXT4-fs (loop1): 1 truncate cleaned up [ 1163.387131][T19225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1WatqgJEq0qGhAqR8QnAI5IfAJOcEHACcQVJI4IqUK9tHBAi9bebdzYTu2krhv8+0lbz+yOd2Z2durZnd0EMLCq+T9JxI6I+CUiRuvRGxNU6x/XrlyY/evKhdkksuyVP5P4Lcuyq1cuzObJskIe3l7sczyNSD9M4kiLfBfOnT85Mz8/d7aITy6eenty4dz5p06cmjk+d3zu9PThw4cOTj37zPTTt6SeIxFxde97Z/btOfr6Jy/NZvHG91/m9dxRbC/rsWxs3XlWo3rjsWzw6Lr3fmcZaQgnQ30sCF2pRETeXMO1/j8alVhuvNF48YO+Fg7oqfw3e3PT2koZWMqA/7Ak+l0CoD/KH/r8+rdcbuPwo+8uH6lfAOX1vlYs9S1DkeYfW+rXRiM9yr8aEa8t/f1pvkTL+xAAALfW1/n458lW47807m5It7OYGxqLiP9FxK6I+H9E7I6IuyJqae+JiHu7zL+6It48/vlp65oq1qF8/PdcMbd14/gvLZOMVYrYSK3+w8mbJ+bnDhTHZDyGN+fxqVXy+OaFnz9ut61x/Jcvef7lWLAoxx9DK27QHZtZnFlPnRtdfj9i71Cr+ifXZwKSiNgTEXvXsP/8mJ14/It9eXjn9ubtu29a/1Xcgnmm7POIx+rtvxQr6l9K6jm1m5+c3BLzcwcmy7Oi2Q8/Xnq5Xf43b//eytt/W8vz/3r9x5LG+dqF7vO49OtHba9p1nr+b0perYU3FevenVlcPDsVsSlZal4/vfzdMl6mz+s/vr91/98V8c9nxffui4j8JL4/Ih6IiAeLsj8UEQ9HxP5V6v/d84+8tfoR6m/7H+uq/bsPVE5++1W7/Dtr/0O10HixppP//zot4HqOHQAAAGwUae0Z+CSduB5O04mJ+jP8u2NbOn9mYfGJarxz+lj9WfmxGE7LO12jDfdDp4p7w2V8ekX8YO2+cZZl2dZafGL2zHyv5tSBzmxv0/9zv1f6XTqg57qaR2v3RhuwIXlfEwaX/g+DS/+HwaX/w+Bq1f8vRlzrQ1GA28zvPwwu/R8Gl/4Pg0v/h4HU/Ep8+edW1vKm/3Jg19F1fX2AApUe7Tlvw14WPtK+H7q1B9I7oxj1wOaI6DTxxZ626crzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYOP7NwAA//87v+0t") 12:48:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1163.533684][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:48:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:48:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:48:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) pipe2(&(0x7f0000000000), 0x84080) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) socket(0xa, 0x1, 0x0) (async) close(r3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) [ 1163.712407][T19246] loop1: detected capacity change from 0 to 512 12:48:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 32) r3 = socket(0xa, 0x1, 0x0) close(r3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:48:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) [ 1163.774366][T19246] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:48:59 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1163.820176][T19246] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1163.844212][T19246] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1163.854800][T19246] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1163.865297][T19246] EXT4-fs (loop1): 1 truncate cleaned up [ 1163.870973][T19246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x40}}, 0x0, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10) r6 = socket(0xa, 0x1, 0x0) close(r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, '^'}, {}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}], 0xa, "ebb575c25133ff96581097268118a6842385f02bb4e7accb11576e760cc872255db96e26b3a8bf707a030756b0774570c0df836410f38a52ca995eb540a344a26fca808b71b9f5af7c398c73edf2c078ce3331098f54bd98743d5b8b2a69894148c3f8c3c5647a836d2c27ce9b2e95ec60a34a7097ae86849d6d9740adb6a06e135d522facbe34ad4102a948cf4897c3b0496ae5bc5eeb8a1d413ba1185d27362dcb681b3060b3ef79"}, 0x195) [ 1164.104863][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x40}}, 0x0, 0x8}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x40}}, 0x0, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10) socket(0xa, 0x1, 0x0) (async) r6 = socket(0xa, 0x1, 0x0) close(r6) (async) close(r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, '^'}, {}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}], 0xa, "ebb575c25133ff96581097268118a6842385f02bb4e7accb11576e760cc872255db96e26b3a8bf707a030756b0774570c0df836410f38a52ca995eb540a344a26fca808b71b9f5af7c398c73edf2c078ce3331098f54bd98743d5b8b2a69894148c3f8c3c5647a836d2c27ce9b2e95ec60a34a7097ae86849d6d9740adb6a06e135d522facbe34ad4102a948cf4897c3b0496ae5bc5eeb8a1d413ba1185d27362dcb681b3060b3ef79"}, 0x195) 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:00 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00', 0x40}}, 0x0, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10) r6 = socket(0xa, 0x1, 0x0) close(r6) (async) close(r6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r6, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0', [{0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, '^'}, {}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}, {0x20, 'blkio.bfq.io_service_time_recursive\x00'}], 0xa, "ebb575c25133ff96581097268118a6842385f02bb4e7accb11576e760cc872255db96e26b3a8bf707a030756b0774570c0df836410f38a52ca995eb540a344a26fca808b71b9f5af7c398c73edf2c078ce3331098f54bd98743d5b8b2a69894148c3f8c3c5647a836d2c27ce9b2e95ec60a34a7097ae86849d6d9740adb6a06e135d522facbe34ad4102a948cf4897c3b0496ae5bc5eeb8a1d413ba1185d27362dcb681b3060b3ef79"}, 0x195) 12:49:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:49:00 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E2PFEUfAPB/9+zyvuw+PPgCoo6icePLLrugcvCC0YSLiYke9LguK0EGMOyaCCGyGoNH4ydQjyZ+Ak96MepJ41XvxoQYLqIH06ZnumHYmVlmdhmGdX6/pJmq7pquqq4uprqrewMYWtX8nyRiR0T8EhHjjeiNCaqNj6tXLsz/deXCfBJZ9sofST3dn1cuzBcpR7Msy/LA9mKfk2lE+mESR9rku3ju/Mm5Wm3hbBGfXjr19vTiufNPnTg1d3zh+MLp2cOHDx2cefaZ2advST3H8rLufe/Mvj1HX//kpfks3vj+y7z8O4rtTfUoTKw7z2pUbzyWTR5d997vLGNN4WRkgAWhJ5WIyJtrtN7/x6MS1xtvPF78YKCFA/oq/83e3LK2UgaWM+A/LIlBlwAYjPKHPr/+LZfbOPwYuMtHGhdAeb2vFktjy0ik+ceWxrXRWJ/yr0bEa8t/f5ov0fY+BADArfV1Pv55st34L427m9LtLOaGJiLifxGxKyL+HxG7I+KuiHraeyLi3h7zr66It45/ftq6pop1KR//PVfMbd04/kvLJBOVIjZWr/9o8uaJ2sKB4phMxujmPD6zSh7fvPDzx522NY//8iXPvxwLFuX4fWTFDbpjc0tz66lzs8vvR+wdaVf/5NpMQBIReyJi7xr2nx+zE49/sS8P79zeun33Teu/ilswz5R9HvFYo/2XY0X9S0kjp07zk9NborZwYLo8K1r98OOllzvlf/P276+8/be1Pf+v1X8iaZ6vXew9j0u/ftTxmmat5/+m5NV6eFOx7t25paWzMxGbkuXW9bPXv1vGy/R5/Sf3t+//uyL++az43n0RkZ/E90fEAxHxYFH2hyLi4YjYv0r9v3v+kbdWP0KDbf9jPbV/74HKyW+/6pR/d+1/qB6aLNZ08/9ftwVcz7EDAACAjSKtPwOfpFPXwmk6NdV4hn93bEtrZxaXnqjGO6ePNZ6Vn4jRtLzTNd50P3SmuDdcxmdXxA/W7xtnWZZtrcen5s/U+jWnDnRne4f+n/utMujSAX3X0zxapzfagA3J+5owvPR/GF76Pwwv/R+GV7v+fzHi6gCKAtxmfv9heOn/MLz0fxhe+j8MpdZX4ss/t7KWN/2vB3YdXdfXhyhQ6dOe8zbsZ+EjHfihW3sgvTOK0QhsjohuE1/sa5uuPH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2vn8DAAD//8UJ5Vo=") 12:49:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x6}, &(0x7f00000001c0)=0x8) 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:00 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:49:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2AP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQw0X0YMbM7gws3d2y27IsuJ9PMux7M2/nvTdvHvtm3kwDGFrV/J8kYltE/BoR443o9QmqjY8rl8/P/335/HwSWfbqn0k93V+Xz88XKXdmWZblga3FPifTiPSjJA63yXfx7LkTc7XawpkiPr108p3pxbPnnj5+cu7YwrGFU7OHDh08MPPcs7PP3JR6juVl3fP+6b27j7zx6cvzWbz5w1d5+bcV25vqUZhYd57VqF5/LJs8tu69317GmsLJyAALQk8qEZE312i9/49HJa413ni89OFACwf0Vf6bvbFlbaUMLGfA/1gSgy4BMBjlD31+/Vsut3D4MXCXDjcugPJ6XymWxpaRSPOPTY1ro7E+5V+NiNeX//ksX6LtfQgAgJvrm3z881S78V8a9zSl217MDU1ExF0RsSMidkbEroi4O6Ke9t6IuK/H/Ksr4q3jn583r6liXcrHf88Xc1vXj//SMslEpYiN1es/mrx1vLawvzgmkzG6MY/PrJLHty/+8kmnbc3jv3zJ8y/HgkU5/hhZcYPu6NzS3Hrq3OzSBxF7RtrVP7k6E5BExO6I2LOG/efH7PgTX+7Nw9u3tm7fdcP6r+ImzDNlX0Q83mj/5VhR/1LSyKnT/OT0pqgt7J8uz4pWP/508ZVO+d+4/fsrb/8tbc//q/WfSJrnaxd7z+Pibx93vKZZ6/m/IXmtHt5QrHtvbmnpzEzEhmS5df3ste+W8TJ9Xv/Jfe37/46Ifz8vvnd/ROQn8QMR8WBEPFSU/eGIeCQi9q1S/+9fePTt1Y/QYNv/aE/t33ugcuK7rzvl3137H6yHJos13fz/120B13PsAAAA4E6R1p+BT9Kpq+E0nZpqPMO/K7aktdOLS09W491TRxvPyk/EaFre6Rpvuh86U9wbLuOzK+IH6veNsyzLNtfjU/Ona/2aUwe6s7VD/8/9Xhl06YC+62kerdMbbcAdyfuaMLz0fxhe+j8ML/0fhle7/n8h4soAigLcYn7/YXjp/zC89H8YXvo/DKXWV+LLP7eyljf9rwV2HFnX14coUOnTnvM27GfhIx34oVt7IL09itEIbIyIbhNf6Gubrjx/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7nz/BQAA//+MN+Vo") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x6}, &(0x7f00000001c0)=0x8) 12:49:01 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:01 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1165.870780][T19358] ================================================================== [ 1165.878915][T19358] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_sb_inodes [ 1165.886939][T19358] [ 1165.889263][T19358] write to 0xffff88810635a640 of 8 bytes by task 9433 on cpu 0: [ 1165.896913][T19358] writeback_sb_inodes+0x2d7/0xaa0 [ 1165.902049][T19358] wb_writeback+0x252/0x6e0 [ 1165.906566][T19358] wb_workfn+0x1a8/0x8d0 [ 1165.910823][T19358] process_one_work+0x434/0x860 [ 1165.915697][T19358] worker_thread+0x5f2/0xa10 [ 1165.920292][T19358] kthread+0x1d7/0x210 [ 1165.924379][T19358] ret_from_fork+0x2e/0x40 [ 1165.928870][T19358] ret_from_fork_asm+0x11/0x20 [ 1165.933646][T19358] [ 1165.935968][T19358] read to 0xffff88810635a640 of 8 bytes by task 19358 on cpu 1: [ 1165.943598][T19358] __mark_inode_dirty+0x58/0x7d0 [ 1165.948569][T19358] ext4_mb_new_blocks+0x16a2/0x21e0 [ 1165.953786][T19358] ext4_ext_map_blocks+0xe42/0x3630 [ 1165.959001][T19358] ext4_map_blocks+0x704/0xf60 [ 1165.963778][T19358] ext4_alloc_file_blocks+0x278/0x6e0 [ 1165.969179][T19358] ext4_fallocate+0x77e/0x11c0 [ 1165.973971][T19358] vfs_fallocate+0x378/0x3e0 [ 1165.978587][T19358] do_vfs_ioctl+0x12d7/0x1390 [ 1165.983302][T19358] __se_sys_ioctl+0x81/0x140 [ 1165.987919][T19358] __x64_sys_ioctl+0x43/0x50 [ 1165.992537][T19358] do_syscall_64+0x41/0xc0 [ 1165.996964][T19358] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1166.002875][T19358] [ 1166.005203][T19358] value changed: 0x0000000000020007 -> 0x0000000000000000 [ 1166.012312][T19358] [ 1166.014632][T19358] Reported by Kernel Concurrency Sanitizer on: 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8mTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1WatqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOKBFa+82bmyndlLXDf79pK1ndmd3ZnZ26tkdbwIYWNX8nyRiV0T8EhGj9eiNCar1j2tXL879dfXiXBJZ9sofSS3dn1cvzuXJsizLxotddhbHnEgj0g+TONoi38XzF07NLizMnyviU0un355aPH/hqZOnZ0/Mn5g/M3PkyOFD088+M/P0LannSF7Wfe+d3b/32OufvDSXxRvff5mXf1exvazHirEN51mN6o3nssGjGz76nWWkIZwM9bEgdKUSEXlzDdf6/2hUYqXxRuPFD/paOKCn8u/trU1rK2VgOQP+w5LodwmA/ii/6PP733K5jcOPvrtytH4DlNf7WrHUtwxFmn9sq98bjfQo/2pEvLb896f5Ei2fQwAA3Fpf5+OfJ1uN/9K4uyHd7mJuaCwi/hcR4xHx/4jYExF3RdTS3hMR93aZf3VVvHn889P2dVWsQ/n477libuvG8V9aJhmrFLGRWv2HkzdPLswfLM7JRAxvzePTa+TxzQs/f9xuW+P4L1/y/MuxYFGO34dWPaA7Prs0u5E6N7ryfsS+oVb1T67PBCQRsTci9q3j+Pk5O/n4F/vz8O6dzdv33LT+a7gF80zZ5xGP1dt/OVbVv5TUc2o3Pzm1LRbmD06VV0WzH368/HK7/G/e/r2Vt/+Oltf/9fqPJY3ztYvd53H514/a3tOs9/rfkrxaC28p1r07u7R0bjpiS7LcvH5mZd8yXqbP6z9xoHX/H4/457Niv/siIr+I74+IByLiwaLsD0XEwxFxYI36f/f8I2+tfYb62/7Hu2r/7gOVU99+1S7/ztr/cC00Uazp5P+/Tgu4kXMHAAAAm0Va+w18kk5eD6fp5GT9N/x7Yke6cHZx6YlqvHPmeP238mMxnJZPukYbnodOF8+Gy/jMqvih2nPjLMuy7bX45NzZhV7NqQOd2dmm/+d+q/S7dEDPdTWP1u6NNmBT8r4mDC79HwaX/g+DS/+HwdWq/1+KuNaHogC3me9/GFz6Pwwu/R8Gl/4PA6n5lfjyz62s503/lcD4sQ3tPkCBSo+OnLdhLwsfad9P3foD6Z1RjHpga0R0mvhST9t09fUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw+f0bAAD//6Ak5Wc=") [ 1166.020778][T19358] CPU: 1 PID: 19358 Comm: syz-executor.4 Not tainted 6.5.0-rc7-syzkaller-00104-g4f9e7fabf864 #0 [ 1166.031206][T19358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 1166.041267][T19358] ================================================================== 12:49:02 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:02 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r6, 0x6}, &(0x7f00000001c0)=0x8) 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTA2/mhpQeXgBaMJFxMTPeixlkqQAobWRAiRagwejX+BejTxL/CkF6OeNF71bkyI4SJ6MGNmd4Yu3d2y27IsdT+fZNj3Zt7Me2/ePPbNvJ0GMLCq+T9JxI6I+DUiRuvRGxNU6x/Xrl6c/fvqxdkksuzVP5Naur+uXpzNk2VZlh0odtleHHM8jUg/SuJoi3wXzl84NTM/P3euiE8unn5ncuH8hadPnp45MXdi7sz0kSOHD0099+z0M7ekniN5Wfe+f3bfnmNvfPrybBZv/vBVXv4dxfayHsvG1p1nNao3nssGj6376HeWkYZwMtTHgtCVSkTkzTVc6/+jUYnlxhuNlz7sa+GAnsq/tzc3ra2UgaUM+B9Lot8lAPqj/KLP73/L5TYOP/ruytH6DVBe72vFUt8yFGn+saV+bzTSo/yrEfH60j+f5Uu0fA4BAHBrfZOPf55qNf5L496GdDuLuaGxiLgrInZFxN0RsTsi7omopb0vIu7vMv/qinjz+OfnrWuqWIfy8d/zxdzWjeO/tEwyViliI7X6DydvnZyfO1ick/EY3pzHp1bJ49sXf/mk3bbG8V++5PmXY8GiHH8MrXhAd3xmcWY9dW505YOIvUOt6p9cnwlIImJPROxdw/Hzc3byiS/35eGd25u3775p/VdxC+aZsi8iHq+3/1KsqH8pqefUbn5yckvMzx2cLK+KZj/+dPmVdvnfvP17K2//bS2v/+v1H0sa52sXus/j8m8ft72nWev1vyl5rRbeVKx7b2Zx8dxUxKZkqXn99PK+ZbxMn9d/fH/r/r8r4t/Pi/0eiIj8In4wIh6KiIeLsj8SEY9GxP5V6v/9CwfeXv0M9bf9j3fV/t0HKqe++7pd/p21/+FaaLxY08n/f50WcD3nDgAAADaKtPYb+CSduB5O04mJ+m/4d8e2dP7swuKT1Xj3zPH6b+XHYjgtn3SNNjwPnSqeDZfx6RXxQ7XnxlmWZVtr8YnZs/O9mlMHOrO9Tf/P/V7pd+mAnutqHq3dG23AhuR9TRhc+j8MLv0fBpf+D4OrVf+/FHGtD0UBbjPf/zC49H8YXPo/DC79HwZS8yvx5Z9bWcub/suBXcfWtfsABSo9OnLehr0sfKR9P3VrD6R3RjHqgc0R0WniSz1t05XXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMb3XwAAAP//VwTleQ==") 12:49:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1fe2fa0cd172", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept(r2, 0x0, &(0x7f0000000000)) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1166.725498][T19412] loop1: detected capacity change from 0 to 512 [ 1166.755829][T19412] EXT4-fs (loop1): invalid first ino: 1 12:49:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:02 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1166.848537][T19416] loop1: detected capacity change from 0 to 512 [ 1166.876393][T19416] EXT4-fs (loop1): invalid first ino: 2 12:49:03 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:03 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1167.254878][T19423] loop1: detected capacity change from 0 to 512 [ 1167.284486][T19423] EXT4-fs (loop1): invalid first ino: 3 12:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1fe2fa0cd172", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1fe2fa0cd172", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept(r2, 0x0, &(0x7f0000000000)) close(r2) (async) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1167.400797][T19436] loop1: detected capacity change from 0 to 512 12:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1167.462716][T19436] EXT4-fs (loop1): invalid first ino: 4 12:49:03 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1167.559990][T19448] loop1: detected capacity change from 0 to 512 [ 1167.596936][T19448] EXT4-fs (loop1): invalid first ino: 5 12:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) 12:49:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1fe2fa0cd172", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) accept(r2, 0x0, &(0x7f0000000000)) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1168.260966][T19460] loop1: detected capacity change from 0 to 512 [ 1168.295035][T19460] EXT4-fs (loop1): invalid first ino: 8 12:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @mcast1, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x5, 0xfffffff8, 0x4bb86ef9, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="056f5a00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000300)={r3, 0x73, 0x3, 0x101}, 0x10) r7 = signalfd(r0, &(0x7f0000000080), 0x8) sendto$inet6(r7, &(0x7f0000000280)="bc31755495", 0x5, 0x4040, &(0x7f00000002c0)={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet_sctp(r5, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1168.393522][T19472] loop1: detected capacity change from 0 to 512 [ 1168.430488][T19472] EXT4-fs (loop1): invalid first ino: 9 12:49:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) 12:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1168.558118][T19490] loop1: detected capacity change from 0 to 512 [ 1168.572456][T19490] EXT4-fs (loop1): invalid first ino: 10 12:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:04 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:04 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) [ 1168.658494][T19493] loop1: detected capacity change from 0 to 512 [ 1168.689162][T19493] EXT4-fs (loop1): revision level too high, forcing read-only mode 12:49:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) [ 1168.706679][T19493] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1168.713789][T19493] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1168.724649][T19493] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1168.760899][T19493] EXT4-fs (loop1): 1 truncate cleaned up [ 1168.766636][T19493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:04 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) 12:49:04 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1168.801961][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.866037][T19506] loop1: detected capacity change from 0 to 512 [ 1168.888387][T19506] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1168.904540][T19506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1168.924588][T19506] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 1168.970751][T19506] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 1168.993300][T19506] EXT4-fs (loop1): 1 truncate cleaned up [ 1168.999085][T19506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:05 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1169.117479][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:05 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1169.183421][T19523] loop1: detected capacity change from 0 to 512 [ 1169.240928][T19523] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1169.264506][T19523] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1169.271347][T19523] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 12:49:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @mcast1, 0x7}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x5, 0xfffffff8, 0x4bb86ef9, 0x0}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="056f5a00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r5 = socket(0xa, 0x1, 0x0) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000300)={r3, 0x73, 0x3, 0x101}, 0x10) (async) r7 = signalfd(r0, &(0x7f0000000080), 0x8) sendto$inet6(r7, &(0x7f0000000280)="bc31755495", 0x5, 0x4040, &(0x7f00000002c0)={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet_sctp(r5, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:49:05 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:49:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1169.301534][T19523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0x2, 0x0}, 0x0, 0x0, 0xff, 0x3}, 0x20) (async, rerun: 64) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3f, @mcast1, 0x7}, 0x1c) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x5, 0xfffffff8, 0x4bb86ef9, 0x0}, &(0x7f0000000200)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="056f5a00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async, rerun: 32) r5 = socket(0xa, 0x1, 0x0) (rerun: 32) close(r5) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r6, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000300)={r3, 0x73, 0x3, 0x101}, 0x10) (async, rerun: 64) r7 = signalfd(r0, &(0x7f0000000080), 0x8) sendto$inet6(r7, &(0x7f0000000280)="bc31755495", 0x5, 0x4040, &(0x7f00000002c0)={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet_sctp(r5, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)}], 0x1, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) [ 1169.360739][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01800800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) 12:49:05 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1169.429318][T19543] loop1: detected capacity change from 0 to 512 [ 1169.505026][T19543] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1169.513543][T19543] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1169.520371][T19543] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 12:49:05 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1169.567439][T19543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:05 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3E1vG0UfAPD/rpO+p8nTp7y0FDAURMRL0qQFeuBSBFIvSEhwgGNIQ1XqtqgJEq0qGhAqR8QnAI5IfAJOcEHACcQV7gipQr1QOCCjtXcTJ7ZTO4nrBv9+0jYzu+OdmZ2denYmmwAGVjn7J4nYExG/RMRoPboyQbn+4+aNK7N/3bgym0S1+sofSS3dnzeuzGbJqrnGc46nEemHSZxoke/8pctnZyqVuYt5fHLh3NuT85cuP3Xm3MzpudNz56ePHz92dOrZZ6af3pR6jmRlPfjehUMHTr7+yUuz1Xjj+y+z8u/Jjxf1WDa24TzLUV55LRs8uuGz31lGGsLJUB8LQldKEZE113Ct/49GKZYbbzRe/KCvhQN6KvvO3t60t1QEFqvAf1gS/S4B0B/FF332/Ftst3H40XfXT9QfgLJ638y3+pGhSLMfO+rPRiM9yr8cEa8t/v1ptkXLeQgAgM31dTb+ebLV+C+NuxvS7c3XhsYi4n8RsS8i/h8R+yPiroha2nsi4t4u8y+vijePf37aua6KdSgb/z2Xr22tHP+lRZKxUh4bqdV/OHnzTGXuSH5NxmN4exafWiOPb174+eN2xxrHf9mW5V+MBfNy/D60aoLu1MzCzEbq3Oj6+xEHh1rVP1laCUgi4kBEHFzH+bNrdubxLw5l4b27m4/vv2X917AJ60zVzyMeq7f/YqyqfyGp59RufXJyR1TmjkwWd0WzH3689nK7/G/d/r2Vtf+ulvf/Uv3Hksb12vnu87j260dtn2nWe/9vS16thbfl+96dWVi4OBWxLVls3j+9/NkiXqTP6j9+uHX/3xfxz2f55+6LiOwmvj8iHoiIB/OyPxQRD0fE4TXq/93zj7y19hXqb/uf6qr9uw+Uzn77Vbv8O2v/Y7XQeL6nk///Oi3gRq4dAAAAbBVp7Xfgk3RiKZymExMRu2tzc7vSyoX5hSfK8c75U/XflR+L4bSY6RptmA+dyueGi/j0qvjR2rxxtVqt7qzFJ2YvVHq1pg50Zneb/p/5rdTv0gE919U6Wrs32oAtyfuaMLj0fxhc+j8MLv0fBler/n814mYfigLcZr7/YXDp/zC49H8YXPo/DKTmV+KLP7eynjf9lwP7Tm7o4wMUKPXozFkb9rLwkfb90q0/kN4ZxagHtkdEp4mv9rRNV98/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW9+/AQAA//9coulm") [ 1169.660519][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:05 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1169.747797][T19564] loop1: detected capacity change from 0 to 512 [ 1169.795784][T19564] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1169.819377][T19564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1169.825851][T19564] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 [ 1169.838510][T19564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1169.864405][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r7}, 0x10) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r8, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r8, r5, 0x0, 0xffefffff) 12:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTA2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAi1Rg8Gv8C9WjiX+BJL0Y9abzq3ZgQw0X0YNbM7gzddnfLbttlqfv5JEPfm3k7771589g373UawMAqZ/8kEbsi4teIGK1Hlyco13/cuH559u/rl2eTqFZf/TOppfvr+uXZLFk1l4UP5eccTyPSj5I43iLf+YuXzsxUKnMX8vjkwtl3JucvXnr69NmZU3On5s5NHzt29MjUc89OP7Mh9RzJyrr//fMH9p1449OXZ6vx5g9fZeXflR8v6rFkbN15lqO8/Fo2eGzdZ7+zjDSEk6E+FoSulCIia67hWv8fjVIsNd5ovPRhXwsH9FT2nb21aW+pCCxWgf+xJPpdAqA/ii/67Pm32G7j8KPvrh2vPwBl9b6Rb/UjQ5FmP7bVn41GepR/OSJeX/zns2yLlvMQAAAb65ts/PNUq/FfGvc2pNudrw2NRcRdEbEnIu6OiL0RcU9ELe19EXF/l/mXV8Sbxz8/b19TxTqUjf+ez9e2lo//0iLJWCmPjdTqP5y8dboydzi/JuMxvDWLT62Sx7cv/vJJu2ON479sy/IvxoJ5Of4YWjFBd3JmYWY9dW507YOI/UOt6p/cXAlIImJfROxfw/mza3b6iS8PZOHdO5uP771l/VexAetM1S8iHq+3/2KsqH8hqefUbn1ycltU5g5PFndFsx9/uvpKu/xv3f69lbX/jpb3/836jyWN67Xz3edx9beP2z7TrPX+35K8Vgtvyfe9N7OwcGEqYkuy2Lx/eumzRbxIn9V//GDr/r8n4t/P8889EBHZTfxgRDwUEQ/nZX8kIh6NiIOr1P/7Fw69vfoV6m/7n+yq/bsPlM5893W7/Dtr/6O10Hi+p5P//zot4HquHQAAAGwWae134JN04mY4TScmInbW5uZ2pJXz8wtPluPdcyfrvys/FsNpMdM12jAfOpXPDRfx6RXxI7V542q1Wt1ei0/Mnq/0ak0d6MzONv0/83up36UDeq6rdbR2b7QBm5L3NWFw6f8wuPR/GFz6PwyuVv3/SsSNPhQFuM18/8Pg0v9hcOn/MLj0fxhIza/EF39uZS1v+i8F9pxY18cHKFDq0ZmzNuxl4SPt+6VbeyC9M4pRD2yNiE4TX+lpm668fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa//wIAAP//TELpag==") [ 1170.009133][T19572] loop1: detected capacity change from 0 to 512 [ 1170.031758][T19572] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1170.050352][T19572] EXT4-fs (loop1): orphan cleanup on readonly fs 12:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") [ 1170.056803][T19572] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 [ 1170.078351][T19572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1170.100864][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.183591][T19578] loop1: detected capacity change from 0 to 512 [ 1170.207204][T19578] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1170.230968][T19578] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1170.237441][T19578] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 12:49:06 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r0, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='netfs_rreq_ref\x00', r6}, 0x10) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="0063e070758caae997d7e3ae515aef3b425086dd9e45113b"], 0x5) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r7, r4, 0x0, 0xffefffff) 12:49:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01800800", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) (async) r2 = socket(0xa, 0x1, 0x0) close(r2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="a6", 0x1}], 0x1}], 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x20}, &(0x7f0000000240)=0x18) (rerun: 32) [ 1170.274288][T19578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$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") 12:49:06 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1170.340806][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.377920][T19583] loop1: detected capacity change from 0 to 512 [ 1170.427564][T19583] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1170.446554][T19583] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1170.453003][T19583] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 12:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAixRg8Gv8C9WjiX+BJL0Y9abzq3ZgQw0X0YNbM7gzddnfLbttlqfv5JEPfm3k7771589g373UawMAqZ/8kEbsi4teIGK1Hlyco13/cuH5p9u/rl2aTqFZf+zOppfvr+qXZLFk1l4Wv5OccTyPSj5I41iLf+QsXT89UKnPn8/jkwpl3J+cvXHzm1JmZk3Mn585OHz165PDU889NP7sh9RzJyrr/g3MH9h1/89NXZqvx1g9fZeXflR8v6rFkbN15lqO8/Fo2eHzdZ7+zjDSEk6E+FoSulCIia67hWv8fjVIsNd5ovPxhXwsH9FT2nb21aW+pCCxWgf+xJPpdAqA/ii/67Pm32G7j8KPvrh2rPwBl9b6Rb/UjQ5FmP7bVn41GepR/OSLeWPzns2yLlvMQAAAb65ts/PN0q/FfGvc2pNudrw2NRcRdEbEnIu6OiL0RcU9ELe19EXF/l/mXV8Sbxz8/b19TxTqUjf9eyNe2lo//0iLJWCmPjdTqP5y8faoydyi/JuMxvDWLT62Sx7cv/fJJu2ON479sy/IvxoJ5Of4YWjFBd2JmYWY9dW507UrE/qFW9U9urgQkEbEvIvav4fzZNTv15JcHsvDunc3H996y/qvYgHWm6hcRT9TbfzFW1L+Q1HNqtz45uS0qc4cmi7ui2Y8/XX21Xf63bv/eytp/R8v7/2b9x5LG9dr57vO4+tvHbZ9p1nr/b0ler4W35Pven1lYOD8VsSVZbN4/vfTZIl6kz+o/frB1/98T8e/n+eceiIjsJn4wIh6KiIfzsj8SEY9GxMFV6v/9i4+9s/oV6m/7n+iq/bsPlE5/93W7/Dtr/yO10Hi+p5P//zot4HquHQAAAGwWae134JN04mY4TScmInbW5uZ2pJVz8wtPleO9syfqvys/FsNpMdM12jAfOpXPDRfx6RXxw7V542q1Wt1ei0/Mnqv0ak0d6MzONv0/83up36UDeq6rdbR2b7QBm5L3NWFw6f8wuPR/GFz6PwyuVv3/csSNPhQFuM18/8Pg0v9hcOn/MLj0fxhIza/EF39uZS1v+i8F9hxf18cHKFDq0ZmzNuxl4SPt+6VbeyC9M4pRD2yNiE4TX+5pm668fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa//wIAAP//z2zpxw==") [ 1170.468626][T19583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1170.501073][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:06 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000780)='blkio.bfq.idle_time\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f00000005c0), 0x2, 0x0) connect$llc(r4, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) [ 1170.545437][T19595] loop1: detected capacity change from 0 to 512 [ 1170.577029][T19595] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1170.595597][T19595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1170.602025][T19595] EXT4-fs error (device loop1): ext4_orphan_get:1420: comm syz-executor.1: bad orphan inode 13 [ 1170.624101][T19595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. 12:49:06 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x40000002, &(0x7f0000000080)={[], [], 0x2c}, 0x84, 0x45d, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvzLb8Lq2IP0DUVTQ2/mhpQeXgBaMJFxMTPeixlkqQBQytiRAi1RiMJ+NfoB5N/As86cWoJ41XvRsTYriIHsya2Z2h2+5u2W27LHU/n2ToezNv5703bx775r1OAxhY5eyfJGJXRPwaEaP16PIE5fqP69cuzf597dJsEtXqK38mtXR/Xbs0myWr5rLwx/k5x9OI9MMkjrXId/7CxdMzlcrc+Tw+uXDm7cn5CxefOnVm5uTcybmz00ePHjk89ewz009vSD1HsrLuf+/cgX3HX//0pdlqvPHDV1n5d+XHi3osGVt3nuUoL7+WDR5d99lvLyMN4WSojwWhK6WIyJpruNb/R6MUS403Gi9+0NfCAT2VfWdvbdpbKgKLVeB/LIl+lwDoj+KLPnv+LbZbOPzou6vH6g9AWb2v51v9yFCk2Y9t9WejkR7lX46I1xb/+SzbouU8BADAxvomG/882Wr8l8bdDel252tDYxFxR0TsiYg7I2JvRNwVUUt7T0Tc22X+5RXx5vHPz9vXVLEOZeO/5/K1reXjv7RIMlbKYyO1+g8nb56qzB3Kr8l4DG/N4lOr5PHtC7980u5Y4/gv27L8i7FgXo4/hlZM0J2YWZhZT50bXX0/Yv9Qq/onN1YCkojYFxH713D+7JqdevzLA1l4987m43tvWv9VbMA6U/WLiMfq7b8YK+pfSOo5tVufnNwWlblDk8Vd0ezHn6683C7/m7d/b2Xtv6Pl/X+j/mNJ43rtfPd5XPnto7bPNGu9/7ckr9bCW/J9784sLJyfitiSLDbvn176bBEv0mf1Hz/Yuv/vifj38/xz90VEdhPfHxEPRMSDedkfioiHI+LgKvX//vlH3lr9CvW3/U901f7dB0qnv/u6Xf6dtf+RWmg839PJ/3+dFnA91w4AAAA2i7T2O/BJOnEjnKYTExE7a3NzO9LKufmFJ8rxztkT9d+VH4vhtJjpGm2YD53K54aL+PSK+OHavHG1Wq1ur8UnZs9VerWmDnRmZ5v+n/m91O/SAT3X1TpauzfagE3J+5owuPR/GFz6Pwwu/R8GV6v+fznieh+KAtxivv9hcOn/MLj0fxhc+j8MpOZX4os/t7KWN/2XAnuOr+vjAxQo9ejMWRv2svCR9v3SrT2Q3h7FqAe2RkSniS/3tE1X3j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACb338BAAD//66s6c8=") [ 1170.671583][T19079] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:49:06 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20040006}) openat$cgroup(r1, &(0x7f0000000500)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0xdc, 0x3}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bond0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x0, 0x400, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc041}, 0xc000) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00',